What are you working on? V3

[Senney]

[QUOTE=raccoon12;17470981]ReasonMan[/QUOTE]

PersonGuy*

[raccoon12]

[QUOTE=Senney;17471333]PersonGuy*[/QUOTE]

yeah, sorry lol

[Blynx6]

Nevermind. Some fag used mysql injection.

Why does facepunch have to use gay porn and abuse to show a security flaw? Seriously...

[NoRegard]

Wow, everyone in the first post has [b]skill[/b]

[Blynx6]

Why does facepunch have to point out security flaws by putting gay porn in the background?

[Marlamin]

[QUOTE=Blynx6;17477217]Why does facepunch have to point out security flaws by putting gay porn in the background?[/QUOTE]

It's facepunch.

[Druchii]

[QUOTE=Blynx6;17477217]Why does facepunch have to point out security flaws by putting gay porn in the background?[/QUOTE]

You don't even need to ask that really. It's Facepunch, half the members think it's "funny".,

Hope you get it fixed, i was looking forward to seeing the progress.

[Blynx6]

[QUOTE=Druchii;17477240]You don't even need to ask that really. It's Facepunch, half the members think it's "funny".,

Hope you get it fixed, i was looking forward to seeing the progress.[/QUOTE]
I forgot to put in a security measure for mysql injection. I also asked for it for using an ip-based authentication method.

Will be fixed very soon.

[mdakin]

Haha ops i hate it when something goes bad that was good instantly.

[PoliticalM]

You should secure your inputs! mysql_real_escape_string everything!

Working on WeLoveBrew, got the logins, registration, editing account sorted. Onto company profiles.

[Druchii]

[QUOTE=PoliticalM;17477644]You should secure your inputs! mysql_real_escape_string everything!

Working on WeLoveBrew, got the logins, registration, editing account sorted. Onto company profiles.[/QUOTE]

I keep trying to implement the MYSQL_REAL_ESCAPE string, but getting errors :( For now i'm working locally, but gah.

[SteveS]

[QUOTE=Druchii;17477674]I keep trying to implement the MYSQL_REAL_ESCAPE string, but getting errors :( For now i'm working locally, but gah.[/QUOTE]

If you have access to your PHP.ini, make sure magic quotes are disabled. Otherwise, nake sure you check if magic quotes are enabled first, if it is stripslashes first then use real_escape.

[PoliticalM]

What's the exact error? You do need to be connected to MySQL first to make it work...

Also, Fizzadar returns tomorrow ^^ stupid bans

[Druchii]

[QUOTE=PoliticalM;17478103]What's the exact error? You do need to be connected to MySQL first to make it work...

Also, Fizzadar returns tomorrow ^^ stupid bans[/QUOTE]

I was using this snippet of useful code:

<?php 
  foreach ($_POST as $key => $value) { 
    $_POST[$key] = mysql_real_escape_string($value); 
  }
?>

However, you're right, i realised i wasn't connected to MySQL first, i had this as the first thing my page did.
I'll test it again later :)

[jak]

$_POST = array_map("mysql_real_escape_string", $_POST);

BAM!

[PoliticalM]

[QUOTE=Vampired;17478202]

$_POST = array_map("mysql_real_escape_string", $_POST);

BAM![/QUOTE]

Well, there's a function I never knew about :D

[arienh4]

[QUOTE=PoliticalM;17478388]Well, there's a function I never knew about :D[/QUOTE]
Same here, I have had the need a few times, but I never knew.

[Druchii]

[QUOTE=Vampired;17478202]

$_POST = array_map("mysql_real_escape_string", $_POST);

BAM![/QUOTE]

Incredibly useful, thanks! :D

[PoliticalM]

Fixin' mah sessions script, for some stupid reason I was checking $user, which sometimes became an array, and so had random results.

[Ortzinator]

If you use IRC, help me out with my IRC client by taking this short survey! [url]http://spreadsheets.google.com/viewform?formkey=dEplNTJjUkRyek1sdVVTWXozOG5pMGc6MA[/url]

"Do you like beans?"

[Overv]

Are you working on a free IRC client like mIRC?

[Ortzinator]

mIRC is not free but yeah. Open Source too.

Also accepting feedback on the survey. (here obv)

[Overv]

Yeah, I meant free, but like mIRC. I'm looking forward to it.

[Marlamin]

Good luck on developing it, Ortzinator. :)

[Druchii]

Working on my fitness actually now... With the aid of my newest logging program (ok, so, not exactlyadvanced, but i only just started learning PHP).

[url]http://scottsserver.gotdns.com/secret/health/dbdump.php[/url]

[Ortzinator]

[QUOTE=Overv;17482960]Yeah, I meant free, but like mIRC. I'm looking forward to it.[/QUOTE]

Like mIRC but without the shit.

[ryandaniels]

Hey where did nullsquared go, he hasn't posted here for 2 weeks.

I miss the flaming, the condescending remarks, and his blatant hatred for everyone here.

[nos217]

xChat.

[Baldr]

[QUOTE=ryandaniels;17484644]Hey where did nullsquared go, he hasn't posted here for 2 weeks.

I miss the flaming, the condescending remarks, and his blatant hatred for everyone here.[/QUOTE]

I think he is [U]very[/U] busy with Pseudoform (On the forum there his last post was a hour ago.).

[qurl]

Pseudoform is looking amazing. (I can never remember the name though)