Clan error (11)

Quote:

Originally Posted by tnrh1

They cant do sql injection because I dont use any asp files only the clan files and no one can see them..I dont have any web files because i have only forum.
I am sure its somthing about the netframework, I did by my self a guide how to prevent sql injection [by php].
and let's say you are right what can I do now everyone get banned when they log in and I can view my sql tables.

You see, the problem with this is that you contradict your self again. Clan files are ASP... you haven't changed the client and server side code to change that to PHP or Perl or anything. You think that because ASP doesn't load into your web browser people can't see it? Or that that means you can't get injected through it? You are very wrong. In fact the clan ASP is the most common place to start... which is why some have gone to great lengths to avoid using ASP for Clan.

I understand that it takes going to great lengths to achieve this, because the client is hugely fussy over the size and shape of packets... and in all honesty, you can go to less effort and get the ASP code safe in the first place.

But people are giving you good advise here, and you are telling them that it is wrong because you don't have clans set up on ASP, when you do. The advise they are giving you is absolutely appropriate, and you are absolutely dismissing it.

I don't know how to fix your problem, but I know enough about the interactions between the client and the ASP pages presented by IIS to see that effectively you are saying your clan system doesn't work, is set up perfectly (in which case it would work perfectly) and isn't set up at all. All in one post. How can anyone offer advise to that?

I'm sure you don't mean to say all those contradictions. But that is the meaning that comes out of your words.

You're banned users... why do they DC? Because I would suspect they DC because they have been banned by the server... which would explain why, when they try to connect, it tells them they are banned. Just a thought.

The server creates user bans in BlackUser folder and in SQL database... check to see if your "banned" users are being put in there, and if they are, checks the server logs to see why the server DCed and Banned them. ^_^