Flashindustries.com Test

[NathanCH]

Hey everyone,

 

My site has been hacked 4 times since 2004 but most recently yesterday afternoon. Oddly enough, the person who hacked my site yesterday helped me find this site and recommended that I ask you guys to help me secure my site.

 

URL: http://www.flashindustries.com

 

I'm a bit nervous doing this because I don't want to direct a bunch of experienced coders to my bad coding  .

[phpSensei]

Careful

 

http://www.flashindustries.com/tutorial_view.php

http://www.flashindustries.com/resource_view.php

 

Warning: mysql_select_db() [function.mysql-select-db]: Access denied for user 'flashind'@'localhost' (using password: NO) in /home/flashind/public_html/resource_view.php on line 37

Warning: mysql_select_db() [function.mysql-select-db]: A link to the server could not be established in /home/flashind/public_html/resource_view.php on line 37
Access denied for user 'flashind'@'localhost' (using password: NO)

 

FROM RESOURCE_VIEW

 

Try to restricted direct view from those files with .htaccess

[phpSensei]

http://www.flashindustries.com/index.php?page=profile&id[]

 

Warning: mysql_real_escape_string() expects parameter 1 to be string, array given in /home/flashind/public_html/profile.php on line 13

 

http://www.flashindustries.com/index.php?page=resources&category[]

 

Warning: mysql_real_escape_string() expects parameter 1 to be string, array given in /home/flashind/public_html/resources.php on line 352

 

http://www.flashindustries.com/resources.php

 

  
Warning: mysql_select_db() [function.mysql-select-db]: Access denied for user 'flashind'@'localhost' (using password: NO) in /home/flashind/public_html/resources.php on line 28

Warning: mysql_select_db() [function.mysql-select-db]: A link to the server could not be established in /home/flashind/public_html/resources.php on line 28
Access denied for user 'flashind'@'localhost' (using password: NO) 

[phpSensei]

http://www.flashindustries.com/index.php?page=tutorials&category=21&order[]

 

Warning: mysql_real_escape_string() expects parameter 1 to be string, array given in /home/flashind/public_html/tutorials.php on line 596

 

http://www.flashindustries.com/tutorials.php

 

  
Warning: mysql_select_db() [function.mysql-select-db]: Access denied for user 'flashind'@'localhost' (using password: NO) in /home/flashind/public_html/tutorials.php on line 29

Warning: mysql_select_db() [function.mysql-select-db]: A link to the server could not be established in /home/flashind/public_html/tutorials.php on line 29
Access denied for user 'flashind'@'localhost' (using password: NO) 

 

http://www.flashindustries.com/index.php?page=news_view&view[]

 

Warning: mysql_real_escape_string() expects parameter 1 to be string, array given in /home/flashind/public_html/news_view.php on line 13

Warning: mysql_num_rows(): supplied argument is not a valid MySQL result resource in /home/flashind/public_html/news_view.php on line 15