Cattapult Comics

[inzuki]

We can post our websites here, right? :downs:

Anyways, here's the website link:
[url]http://www.cattapultcomics.byethost14.com/[/url]

[u][b]F.A.Q.:[/b][/u]

[b]Q1. What's Cattapult Comics about?[/b]
--------------------------------------------------
[b]A1.[/b] Cattapult Comics is a site where you may create up to four of your own comic-series and upload comic pages to said series. Users may leave a comment on your comic-series and give you feature points.

[b]Q2. What are feature points?[/b]
--------------------------------------------------
[b]A2.[/b] Users click a like that says, ":: Feature This Comic! ::" on your comic-series' page to give it a feature point. At the end of the week, the top 4 comics with the most feature points get featured and their points are reset.

[b]Q3. What kinds of comics can I make?[/b]
--------------------------------------------------
[b]A3.[/b] Somewhat appropiate ones. They can contain pretty much anything except nudity, racial sayings, or anything vulgar and sickening. Blood effects are fine.

[b]Q4. How does the subscriptions feature work?[/b]
--------------------------------------------------
[b]A4.[/b] What happens is when you subscribe to a user, you get Private Messages about a user's new comic-series or comic page they uploaded. I may also add a blog feature for user's to tell their subscribers what's going on.

----------------------------------------------------------------------------------------------------

So basically, it's a site where you're able to create a comic-series to your desire and upload pages to form a miniature comic book. I am [b][u]NOT[/u][/b] the best PHP programmer, nor am I the best website designer. So don't criticize me on the design, I already have someone who yelled at me about it.

All of it has been tested under Firefox. If you are using a different browser, prepare for a mess. Especially in IE, holy shit.

[b][u]Credits:[/u][/b]

User. (and I guess some other people here lurking in the Facepunch Programming section) - For helping me with some small errors. :downs:
Johannes Jenson - Helped with a few errors. Nothing big.
Shattered Defiance - Helped me with quite a lot of errors..
Kona - For the banner.

Now that I look over the site, are there really people who want to make a comic-series, especially on a site like mine? :v:

[User.]

i just tested it

works great, good job

[editline]10:49PM[/editline]

but why all the fieldsets?

[inzuki]

[QUOTE=User.;16843329]i just tested it

works great, good job

[editline]10:49PM[/editline]

but why all the fieldsets?[/QUOTE]

Though it would look nice. Bleh. Better than a whole bunch of plain boxes with a border, eh?

EDIT: I forgot to mysql_real_escape_string the comments. Someone thought it would be funny to redirect the user to the main page :)

[deadeye536]

I did a quick test in IE7 for you, renders quite fine actually, except the the fieldset headers, they are blue instead of pink. (To be honest, doesn't look that bad really). Also, when you have a fieldset inside of a fieldset, Firefox and Chrome both add a padding for you, however, IE7 does not.

Great site though, I do really like the design, colors complement each other, without being in your face.

[inzuki]

[QUOTE=deadeye536;16847895]I did a quick test in IE7 for you, renders quite fine actually, except the the fieldset headers, they are blue instead of pink. (To be honest, doesn't look that bad really). Also, when you have a fieldset inside of a fieldset, Firefox and Chrome both add a padding for you, however, IE7 does not.

Great site though, I do really like the design, colors complement each other, without being in your face.[/QUOTE]

Ah, thanks, you're pretty much the first person to give some positive feedback on the design.

Hopefully, I'll develop a nice, sleek design. But that will be quite a while, so I don't switch designs too often.

Also, I'll gladly accept some suggestions for the site here, too.

[Benjy355]

I had fun with your comment HTML injection earlier, was fun ^_^
htmlspecialchars();

[Senney]

What he said. Screwed up the comments by ending your div early.

[Benjy355]

[QUOTE=Senney;16850044]What he said. Screwed up the comments by ending your div early.[/QUOTE]

<script type="text/javascript">window.location = 'about:blank';</script>Comment!

Made me lol.

[inzuki]

-snip- I fixed it, or at least, I should've.

[Ortzinator]

[url]http://www.cattapultcomics.byethost14.com/comicpage.php?title=%3Ch1%3EWOT%3C/h1%3E[/url]

[inzuki]

[QUOTE=Ortzinator;16859122][url]http://www.cattapultcomics.byethost14.com/comicpage.php?title=%3Ch1%3EWOT%3C/h1%3E[/url][/QUOTE]

Well, that shouldn't be much of a problem now, since I added strip_tags to the fields.

Hopefully I wont be redirected to a different page everything I view the comments :v:

[Ortzinator]

If it returned a 404 instead of displaying a page with broken links it wouldn't be a problem.

[inzuki]

[QUOTE=Ortzinator;16860589]If it returned a 404 instead of displaying a page with broken links it wouldn't be a problem.[/QUOTE]

Oh, I only said it redirected me to a broken page because people were using Javascript to direct me to a page that doesn't exist. :v:

[Senney]

Inzuki, I'd recommend you use a security function on all of your user input. ALL OF IT. If it comes from the user, secure it. I use this one quite often:

	function Protect($return)
	{
		$return = mysql_real_escape_string($return);
		$return = strip_tags($return);
		$return = htmlspecialchars($return);
		
		return $return;
	}
	

[Benjy355]

strip_tags removes all HTML code, making htmlspecialchars pretty useless.
[i]Just[/i] use htmlspecialchars(), and mysql_real_escape_string for data going into SQL queries.

[inzuki]

Ah, okay.

And Senney, should I use that even when the user input is asking for a link?

[Senney]

[QUOTE=Benjy355;16863092]strip_tags removes all HTML code, making htmlspecialchars pretty useless.
[i]Just[/i] use htmlspecialchars(), and mysql_real_escape_string for data going into SQL queries.[/QUOTE]

htmlspecialchars also changes & to & and a few more conversions I believe. I don't think that strip_tags() does that.

[img]http://imgs.xkcd.com/comics/exploits_of_a_mom.png[/img]

Relevant.

[Benjy355]

Exactly why you'd just use htmlspecialchars() :D
Also, that way you could see what idiot was trying to '[i]haxor your megahurtz[/i]'. Striptags actually strips them.

Also, lol'd at the comic.

[nos217]

The design could do with a serious overhaul in terms of looks, but it functions really well.

[inzuki]

Thanks for some nice feedback guys. If you have any complaints too, please post it here, along with bugs you find.