tyweed Posted June 28, 2008 Share Posted June 28, 2008 I have started to develop a betting website/social network site where groups of individuals can keep track of all their bets, talk trash, etc. a lot of the social networking features have not yet been implemented. However, I have all of the betting statistic and table features implemented at this time. I would like to get some opinions on features I should add, the overall layout, and any other opinion you might have from your initial look at the website. I'm open for any ideas and all criticism! I hope to hear from you, http://www.voodoowebman.com/youbetyourass/ajax/Login.php email: test@demo.com pass: demo Quote Link to comment Share on other sites More sharing options...
LemonInflux Posted June 28, 2008 Share Posted June 28, 2008 For a start, don't solely rely on the user having AJAX-supporting browsers. By default, my javascript is turned off (noScripts), and it's always quite annoying to visit a site that messes up because it relies on javascript. ---------------- Now playing: Enter Shikari - Today Won't Go Down In History via FoxyTunes Quote Link to comment Share on other sites More sharing options...
tyweed Posted June 28, 2008 Author Share Posted June 28, 2008 it should have unobtrusive javascript. What didnt work? Quote Link to comment Share on other sites More sharing options...
shlumph Posted June 29, 2008 Share Posted June 29, 2008 Forgot password: Warning: main(dbconnect.php): failed to open stream: No such file or directory in /www/voodoowebman.com/youbetyourass/ajax/LostPassword.php on line 67 Warning: main(dbconnect.php): failed to open stream: No such file or directory in /www/voodoowebman.com/youbetyourass/ajax/LostPassword.php on line 67 Warning: main(): Failed opening 'dbconnect.php' for inclusion (include_path='.:/usr/local/lib/php') in /www/voodoowebman.com/youbetyourass/ajax/LostPassword.php on line 67 Warning: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in /www/voodoowebman.com/youbetyourass/ajax/LostPassword.php on line 77 Could not find that email in the database please try again? Quote Link to comment Share on other sites More sharing options...
ev5unleash Posted June 29, 2008 Share Posted June 29, 2008 On "Sign Up" page the warning.gif image is missing (http://www.voodoowebman.com/youbetyourass/ajax/Warning.jpg) Quote Link to comment Share on other sites More sharing options...
tyweed Posted June 29, 2008 Author Share Posted June 29, 2008 Thanks, yeah I meant to say that the site is just in development stage. So a lot of it is still broken. I was more curious about what you thought of the idea, and interfaces, and overall look within the site. Quote Link to comment Share on other sites More sharing options...
ev5unleash Posted June 29, 2008 Share Posted June 29, 2008 I think you should add more design to the website and change it up with the interface. Make it looke more attractive and easier to use. Quote Link to comment Share on other sites More sharing options...
DMComics Posted June 29, 2008 Share Posted June 29, 2008 Upon using the email and password you specified within your original post to login, I get greeted with a YouTube video. - Is this correct? Shouldn't I get greeted with a "My Account"? Although I can't see anything except from the login page, the sight looks OK. But has still a lot of work to be done. Do you have anything else working as yet, that can be viewed? What is your plans for the site? Dave Quote Link to comment Share on other sites More sharing options...
ev5unleash Posted June 29, 2008 Share Posted June 29, 2008 Yeah, He might of put a redirect link in his site or someone linked it. Because this worked before. Quote Link to comment Share on other sites More sharing options...
DMComics Posted June 29, 2008 Share Posted June 29, 2008 So it use to work, now it doesn't? Dave Quote Link to comment Share on other sites More sharing options...
tyweed Posted June 29, 2008 Author Share Posted June 29, 2008 someone must have done something to the site. It has to do with the javascript redirect i use when you get logged in i think? What is wierd is it goes to main for a second then jumps to that youtube video? Wow I must have a biug whole in my security? var result = oReq.responseText; if(result == "redirect") window.location.href="main.php"; else $("error").innerHTML = result; This is called on successfull login any ideas how someone could have linked the site without changing source in my files? i'm very curious Quote Link to comment Share on other sites More sharing options...
DMComics Posted June 29, 2008 Share Posted June 29, 2008 Not using JavaScript. Quote Link to comment Share on other sites More sharing options...
ev5unleash Posted June 29, 2008 Share Posted June 29, 2008 What type of server are you using? Quote Link to comment Share on other sites More sharing options...
tyweed Posted June 29, 2008 Author Share Posted June 29, 2008 Ok i think have pinned down what it was. I think a sql injection into the table has somehow got in so when the browser prints out table it's letting a javascript redirect happen. I'm trying to get access into mysql now so i can have a look at the tables. as of right now the only way i was editing the table info was through php and this won't work! I guess i should have programmed a bit better! Quote Link to comment Share on other sites More sharing options...
tyweed Posted June 30, 2008 Author Share Posted June 30, 2008 I closed down those user and pass until i fix these embarrassing flaws. And to think i'm a experienced programmer this is bad bad! Quote Link to comment Share on other sites More sharing options...
ev5unleash Posted June 30, 2008 Share Posted June 30, 2008 Yeah, This guy has been getting alot of people though SQL Injections. There are some SQL Client Programs out there, try them. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.