Easyest Php KalOnline Site

[rise2shine]

Hello, this is the easyest kalonline website ( PhP ) i could made that working
some scrips are taken from others, credits go to them.
Its Very Very Easy to use, Check it out

[MentaL]

[Qdud]

Wtf?lol

[Boarderkoen]

Its everything in 1 file:
- Status
- Register
- Ranking
- PW Change

All sql injectable tho

[rise2shine]

hmm okay how do i make so its not SQL injecktible?

[foxx]

if(alnum($var)) {
//proceed
}
else {
//gtfo
} 

[rise2shine]

foxx? what u mean?

[2Kxx]

if(alnum($var)) {
//proceed
}
else {
//gtfo
}

hahaha :)

[foxx]

foxx? what u mean?

Exactly what I wrote?

hahaha :)

Where's the funny part?

[2Kxx]

Exactly what I wrote?


Where's the funny part?

nvm

[mukso]

http://www.w3schools.com/PHP/default.asp was useful for me too

[Justei]

I can't get my head around why kal uses mssql -.- but ill give it a try like foxx said ill use his example, what I think he means is:

$var = $_POST['username'];

if(alnum($var)) {
run the query, like register it etc etc
}
else {
echo 'You are not trying to inject some shit are you? :O';
} 

I just assumed that function checked if

$var 

had any bad characters in it, like

mysql_real_escape_string 

when you are handling mysql, but since this is sum mssql shit, I don't rly know, don't play around with outdated mssql like kal does xD

[foxx]

alnum is a function to check if a string contains only alpha numeric characters, return (bool)false otherwise

so it obviously doesn't matter whether you use postgres, mssql or mysql

Its everything in 1 file:
- Status
- Register
- Ranking
- PW Change

All sql injectable tho

Neither status nor ranking can possibly be injected, so definitely not _all_.

[Justei]

alnum is a function to check if a string contains only alpha numeric characters, return (bool)false otherwise

so it obviously doesn't matter whether you use postgres, mssql or mysql


Neither status nor ranking can possibly be injected, so definitely not _all_.

Okay, thanks for the tip :) but i still think they should have used mysql xD

[Qdud]

lol you could make some more files not that we have to search codes

[soulhunter]

lol i am so stupid whit making working website whit register script >.>
could someone help me? xD otherwise noone will come on my server :(
:P cya

[2Kxx]

Then go into website theard and take one?