Jump to content

dreamwest

Members
  • Posts

    1,223
  • Joined

  • Last visited

    Never

Posts posted by dreamwest

  1. Check htaccess that it doesnt have this RewriteRule ^$ error.php it should be RewriteRule ^$ index.php

     

    Also error.php is refreshing constantly, start by deleting it and index.php and reupload them, change index.php to 444, if someone is hacking they will alter index.php again. If they do change it again ban everyone temporarily :

     

    # limit access to local area network
    <Limit GET POST PUT>
    order deny,allow
    deny from all
    allow from 192.168.0.0/33 #your ip
    </Limit>

     

    Remove all frontpage "vti_cnf" directories if you have them

     

    Block all index browsing:

     

    # stop ppl from browsing indexes
    Options -Indexes

     

    and make sure index.php actually exists if it doesnt you htaccess might look like this

     

    ErrorDocument 404 /error.php

  2. My thought was to store each row as a string, then to explode that string into an array based off the " " (space). Then to test to see if a member of an array had the "@", if so to store that into another array, if not, to spit out "No Email address found".

     

    $string = "hello bob johnhis@domain.com how are you";
    $find = explode('@', $string);
    
    if($find['1'] != ""){
    
    echo "I have a @ in my string!";
    }else{
    
    echo "Doesnt have @ in string!";
    }

  3. Im really crap at securing my forms, but ive been  experimenting with making login more secure. As well as using htmlspecialchars and strip tags etc to try and clean the input before a database query is performed. This works quite well even with a 50,000 row table.

     

    Can anyone see any potential issues with this? I mean they're not actually querying the database directly

     

    
    $user = $_POST['username'];
    
    if($user == ""){
    
    header("Location: /index.php");
    
    }else{
    
    $result = mysql_query( "SELECT username FROM signup " ) ;
    
    while ( $record = mysql_fetch_assoc( $result) ){
        
       $go = $record['username'];
       
        if($user == $go){
    $ok = 1;
    break;
    }
       
    }
    
    if($ok != 1){
    
    header("Location: /index.php");
    
    }else{
    
    continue here....
    
    }
    
    }

  4. So there you have it, dreamwest... how do you like them apples?  :-*

     

    One word - UPGRADES ... ppl are upgrading from the previous buggy versions, there cant be 1 billion firefox users - I-M-P-O-S-S-I-B-L-E

     

     

     

  5. I think dreamwest is pulling everyone's leg, no one can be that straight faced about making claims of a browser that holds less than 1% of the market and must be paid for being 'gods browser' lolol. He's just trying to get a reaction from the crowd (which seems to be working).  :tease-03:

     

    Im 100% serious! I love avant as much as i love BING......i think thats called being open minded to try new things :P

  6. <?php
    session_start();
    
    $uid = $_SESSION['userid'];
    
    // check the login details of the user and stop execution if not logged in
    if($uid ==""){
    echo "<center><font face='Verdana' size='2' color=red>Sorry, Please login and use this page </font></center>";
    exit;
    }
    
    $row=mysql_fetch_object(mysql_query("select * from signup where userid='{$uid}'"));
    
    
    
    echo $row['firstname'];
    echo $row['lastname'];
    ?>
    

  7. playlist_generator.php needs to echo the playlist <location></location>

     

    so make $path an id and get the info from the database

     

    
    $path = $_GET['path'];
    
    if ($path !=""){
    $query = "SELECT * FROM video WHERE file_id='{$path}' ";
    $result = mysql_query($query)or die(mysql_error());
    
    echo '<?xml version="1.0" encoding="UTF-8"?><playlist xmlns="http://xspf.org/ns/0/" version="1"><title>mixmedia</title> <tracklist>';
    
    $row = mysql_fetch_array($result);
    
            $file = "/files/".$row['swfname']; //location of file here
    
    
        echo"<track>
          <location>".$file."</location>
        </track>";
       
    
    echo '</tracklist></playlist>';
    }

  8. You have a ? in your fake url , your real url has no extension ($1?request)

     

    Personally i would reduce it to:

     

    RewriteRule ^mediakey=([^/]+) control/browse.php?request=browse&key=$1 [L]

     

    or

     

    RewriteRule ^media/key=([^/]+) control/browse.php?request=browse&key=$1 [L]

  9. Problem appears to be that with multiple occurrences of images for a product you will get duplicates returned.

     

    You can use distinct within a join but requires a group by the distinct value to work

     

    select distinct * from prod as p, gal as g 
    where p.id_prod = g.idprod_gal group by idprod_gal order by p.update_prod

×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.