mCMS [PHP,SQL]

[Tony]

Hey, I am making a content management system for you habbo users so here is the development thread.

Already there

• Style
• Configuration
• Login
• Register

What's going on?

• Housekeeping
• Security
• Faster
• Client
• Pages

Credits:

Kryptos - Some Snippets
Ry - Design
Nominal - for compliments :)
Tr0ll.™ - Big Help !

Images






Code Snippets

<?php
$link = mysqli_connect("localhost", "my_user", "my_password", "world");

/* check connection */
if (mysqli_connect_errno()) {
    printf("Connect failed: %s\n", mysqli_connect_error());
    exit();
}

$hotel = "mHotel";

/* create a prepared statement */
if ($stmt = mysqli_prepare($link, "SELECT Hotel FROM Home WHERE Name=?")) {

    /* bind parameters for markers */
    mysqli_stmt_bind_param($stmt, "s", $swfs);

    /* execute query */
    mysqli_stmt_execute($stmt);

    /* bind result variables */
    mysqli_stmt_bind_result($stmt, $ip);

    /* fetch value */
    mysqli_stmt_fetch($stmt);

    printf("%s is in district %s\n", $hotel, $swfs);

    /* close statement */
    mysqli_stmt_close($stmt);
}

/* close connection */
mysqli_close($link);
?>

[MentaL]

[Tony]

Thread updated.

[NoBrain]

Nice work, hopefully this will be finished!

[Tony]

Rewriting the register page.

//Input vaildation and the dbase code
if ( $_GET["op"] == "reg" )
 {
 $bInputFlag = false;
 foreach ( $_POST as $field )
  {
  if ($field == "")
   {
   $bInputFlag = false;
   }
  else
   {
   $bInputFlag = true;
   }
  }
 // If we had problems with the input, exit with error
 if ($bInputFlag == false)
  {
  die( "Problem with your registration info. "
   ."Please go back and try again.");
  }
 
 // Fields are clear, add user to database
 //  Setup query
 $q = "INSERT INTO `dbUsers` (`username`,`password`,`email`) "
  ."VALUES ('".$_POST["username"]."', "
  ."PASSWORD('".$_POST["password"]."'), "
  ."'".$_POST["email"]."')";
 //  Run query
 $r = mysql_query($q); 

[Makarov]

<?php
//Input vaildation and the dbase code
if ( $_GET["op"] == "reg" )
 {
     $bInputFlag = false;
     foreach ( $_POST as $field )
      {
          if ($field != null)
           {
               $bInputFlag = true;
           }
      }
 // If we had problems with the input, exit with error
 if (!$bInputFlag)
      {
        die( "Problem with your registration info. Please go back and try again.");
      }
 

 $r = mysql_query("INSERT INTO `dbUsers` (`username`,`password`,`email`) VALUES ('".$_POST["username"]."', '".$_POST["password"]."', '".$_POST["email"]."')");  
?>

Clean up your code.. I hope you're using an IDE to code all of this.

[Tony]

Was using Notepad++ gives me sloppy version of my code. So now I'm installing JDK now I'm going to use IDE.

[NoBrain]

<?php
//Input vaildation and the dbase code
if ( $_GET["op"] == "reg" )
 {
     $bInputFlag = false;
     foreach ( $_POST as $field )
      {
          if ($field != null)
           {
               $bInputFlag = true;
           }
      }
 // If we had problems with the input, exit with error
 if (!$bInputFlag)
      {
        die( "Problem with your registration info. Please go back and try again.");
      }
 

 $r = mysql_query("INSERT INTO `dbUsers` (`username`,`password`,`email`) VALUES ('".$_POST["username"]."', '".$_POST["password"]."', '".$_POST["email"]."')");  
?>

Clean up your code.. I hope you're using an IDE to code all of this.

*cough* filtering *cough*

[Makarov]

Was using Notepad++ gives me sloppy version of my code. So now I'm installing JDK now I'm going to use IDE.

Use Netbeans..

[Tony]

I will now learned a lesson from notepad.

[Tony]

Using this

 $stop 

[Predict]

Good luck with your project, oh and I use WordPad to code everything.. (HTML, CSS, PHP, .JS) xD

[Tony]

Thanks Lol, WordPad is ugly and gives bad format of code and makes looks sloppy, add me on msn malikotaku@gmail.com

[Joopie]

UltraEdit Wtf ;D, Btw, No mysql_real_escape string? x]

[Hejula]

I always use Notepad++ lol, it is the best <3 IDE's just annoy me when they correct you before you have finished writing your line :L

[Tony]

public function write($p) {
    if ( $p['username'] )
      $username = mysql_real_escape_string($p['username']);
    if ( $p['password'])
      $password = mysql_real_escape_string($p['password']);
    if ( $username && $password ) {
      $created = time();
      $sql = "INSERT INTO mDB VALUES('$username','$password','$created')";
      return mysql_query($sql);
    } else {
      return false;
    }
}