Hi i am new to PHP could you test my site

[Ollyg23]

Hi would you PHP fiends mind helpping me with an annoying aspect of my website.

 

www.allaboutexotics.co.uk

 

and try the login link at the top, and could help me why it chucks all that code back at me.

 

 

I am using the $page = $_GET['p'];

 

method case '

$p = 'main.php';

break;

 

which displays the content in the main right div

 

this is what its ment to look and work like

 

www.allaboutexotics.co.uk/main.php

 

works fine with adding users and logging in.

 

I took the code from a tutorial i found online.

 

PLEASE PM me for greater detail and questions

 

Olly

[agentsteal]

Array:

http://www.allaboutexotics.co.uk/userinfo.php?user[]

 

Full Path Disclosure:

http://www.allaboutexotics.co.uk/admin/admin.php

Warning: mysql_connect() [function.mysql-connect]: Access denied for user 'your_name'@'srv86.one.com' (using password: YES) in /customers/allaboutexotics.co.uk/allaboutexotics.co.uk/httpd.www/include/database.php on line 24

Access denied for user 'your_name'@'srv86.one.com' (using password: YES)

 

Full Path Disclosure:

http://www.allaboutexotics.co.uk/include/database.php

Warning: mysql_connect() [function.mysql-connect]: Access denied for user 'your_name'@'srv86.one.com' (using password: YES) in /customers/allaboutexotics.co.uk/allaboutexotics.co.uk/httpd.www/include/database.php on line 24

Access denied for user 'your_name'@'srv86.one.com' (using password: YES)

 

Full Path Disclosure:

http://www.allaboutexotics.co.uk/include/session.php

Warning: mysql_connect() [function.mysql-connect]: Access denied for user 'your_name'@'srv86.one.com' (using password: YES) in /customers/allaboutexotics.co.uk/allaboutexotics.co.uk/httpd.www/include/database.php on line 24

Access denied for user 'your_name'@'srv86.one.com' (using password: YES)

 

PHP Source Code Disclosure:

http://www.allaboutexotics.co.uk/index.php?p=main

 

User Enumeration:

http://www.allaboutexotics.co.uk/~nobody

 

User Enumeration:

http://www.allaboutexotics.co.uk/~root

[Ollyg23]

cheers for that, 

 

Like i said i am quite a NOOB at all this, could you break that down a little 

 

or did I do somthing wrong when I posted the code in the first place?

[shank888]

I dunno much about PHP, as well I am just learning.

 

However

 

if($session->logged_in){

if($form->num_errors > 0){

 

those dont look quite right. and I dont understand why I can see your PHP source code. seeing as it should be serverside.

 

to make your code look a bit cleaner for the HTML and ONLY html i use ' instead of \"

 

i dont see num_errors. get a value set to it anywhere.

 

->  do you mean => ?

[bank]

Just notifying you although you're contact page doesn't work, and some how, your websites displaying tg in the top right corner, which might be related to another cookie I've had, might want to alter your cookies.

 

From the looks of things you've just put the code in the wrong places on the login section, you've displayed it as text rather than as code.

[Mike Vartan]

you forgot to add php tags somewhere.