it is still not patched, you need to filter de username field :)Originally Posted by Jontycat
it is still not patched, you need to filter de username field :)
I am filtering it lol in several different places. Awkward.
Oh well, new cms will be out soon =p
go to register.php:
search for:
$name = $_POST['bean_avatarName'];
replace with:
$name = mysql_real_escape_string($_POST['bean_avatarName']);
Looks nice
I wish you good luck Jonty. Need any help, PM me
It is :Pgo to register.php:
search for:
$name = $_POST['bean_avatarName'];
replace with:
$name = mysql_real_escape_string($_POST['bean_avatarName']);
Try using addslashes.
mysql_real_escape_string adds already slashes where needed
It's okay. I couldn't care less if Zap is dropped or something lol, we take daily backups so the dataloss would be minimal. I probably deserve it anyway =)
<sarcasm>Best hotel owner ever </sarcasm>
Sent from my Eris using Tapatalk
Who cares if he is good or bad hotel owner, it doesn't effect you if he is bad owner. Go retire like you said you were, you haven't even been less-active like you should be when "semi-retired". Noob!
Do u see a gold activity award by my name? No. Thus, less active. Go sucka penis :D
Sent from my Eris using Tapatalk
Also check if magic quotes are turned on...go to register.php:
search for:
$name = $_POST['bean_avatarName'];
replace with:
$name = mysql_real_escape_string($_POST['bean_avatarName']);
When magic quotes are turned on you should use stripslashes() too
Am using a custom written function that includes stripslashes :)
---------- Post added at 06:05 AM ---------- Previous post was at 06:00 AM ----------
Go retire to your dads bedroom faggot.
OOOH SNAPP!
Stop replying to threads with gay images. I want this thread to stay on topic about my development please.OOOH SNAPP!
