BetterPHP

Can you take advantage of checksums maybe? You create a hash of the updated file you send, and then you hash the file again once it reaches its destination, if the hashes are a mismatch, you throw the file in the bin before it has time to do any damage and then try again? I believe that is the only ...

A solution that comes to mind would be to have dynamically changing private keys generated from a set of variables provided by the user, like a session id and an ip address. This opens up to spoofing, but only if the attacker can access both the private session id and spoof the ip address. It's just...

I'm not very experienced with these types of attacks either, but from what I understand they should be more or less prevented if you have SSL. It's not impossible to pull of an attack when only one party has SSL, but it's damn hard, and usually not worth it unless there's some really sensitive data ...

That is actually pretty useful. Neat table.
Wish I had that back when..

Also, never EVER display SQL errors while users have access to your site. If for some crazy reason you disregard that advice, be sure to htmlentities(); your query if you display that as well (Why would one ever...?). Most importantly, check support messages several times a day. Reported a vulnerab...

I completely forgot about this thread, sorry about that.

He's on here occasionally. I've sent him emails and private message to no avail.

I think I know what you mean. I may be wrong though

http://flesler.com/jquery/scrollTo/

ScrollTo is what I'm using. It's really easy to use

So it's about line 66. [syntax=xhtml] <a href="?action=delete" title="delete post">Delete</a>[/syntax] you need to put the rest of the info in the url. [syntax=php] <a href="manage-post.php?action=delete&post_id=<?= $post['id'] ?>" title="delete post">Dele...

I really hope this is somewhat contained and not a total breach.

Really makes you think about your own security though...

I am now compelled to go through the code for all my live projects for security flaws. I guess I know what I'll be doing for the rest of the day.

I believe this is the same topic discussed in another forum. if so, let me know so I can delete it, or if not, then I'll unlock it. But I'll lock it for now to avoid confusion.

So if you click the link generated it does not bring you to a page with an ID in the URL? Have you tried changing [syntax=php]<a href="manage-post.php?action=delete&post_id=<?php echo $_GET['post_id']; ?>">Delete</a>[/syntax] to <a href="manage-post.php?action=delete&post_id=<...

And this is the reason I'm still here. I really enjoy seeing people learn. It really gives me hope for humanity when people learn new things on their free time. I'm always available through private messages ( I get an email, and a notification on my phone if you message me ) if you need help. I migh...

ScTech wrote:Thank you indeed temor

louiegiezer wrote:thanks 4 saving this beautiful website... i know im not good enough in php but i'm learning in a good progress...

No, thank You for staying here! Without you, I wouldn't be here either.

Can you show me how your table looks?

It's an absolute pain to get wrapping to work on mobile and IE. I can understand why mobile, but not why people still use IE... It's a pain, yes- But not impossible! As for IE, I just reinstalled windows on my pc, and I really CBA installing another browser, so even though I HATE IE, I'm still usin...

Very nice tutorial! I appreciate you taking the time to write this.

Okay, so it doesn't work. Does it give you an error or does it not do anything?

And is this thread about the delete function or about fetching data?.. Please keep things separate!

The bots are automatic They find us on google!

I'm sorry for not banning them in time, but I had some major malfunctions going on with my pc the last few days. I almost chucked it from the balcony more than once.
It's working now though, so spammers beware!

Noones heard anything from Jacek in several months. I don't think he's coming back to be honest. I would love to help you, but I am far too busy at the moment. If anyone chooses to work with you, make sure that the agreement is water tight. More often then not these peer to peer deals end with someo...

I'm not entirely sure what you're trying to do or why it uses javascript and html. You need neither. All you need is php. You pass in a string, say an input field or a textarea. [syntax=xhtml] <form method="post"> <textarea name="bbcode">This is text</textarea> <input type="...