RevCMS Online Friends

[Mozilla2]

Hello, community.

I'm here with another release for RevCMS Habbo Skin.
This time, i got the "online friends". What does it? It shows your friends that are currently online!

Simply add this code to your me.php

Spoiler

                                    <ul id="feed-items">
									<li class="small" id="feed-lastlogin">Laatst ingelogd op: {lastSignedIn}</li>
										<li class="small" id="feed-pending-members">De volgende vrienden zijn online: <b>

                            <?PHP
            $query = mysql_query("SELECT * FROM messenger_friendships WHERE user_one_id = '".$_SESSION['user']['id']."'");
            $i = 0;
            while($friends = mysql_fetch_array($query))
            {
                $getfriend = mysql_query("SELECT * FROM users WHERE id ='".$friends['user_two_id']."' AND online = '1' LIMIT 1");
                if(mysql_num_rows($getfriend) > 0)
                {
                    $i++;

                    $friend = mysql_fetch_array($getfriend);
echo htmlspecialchars($friend['username']).', ';
                }
            }
            if($i == 0)
                    {
                   
                        echo '<li class="small" id="feed-pending-members">  Je hebt geen vrienden online.<b><span> ';
                    }
echo '</b>'?>
                            
                       
						</b><br/></li>

So, it should look like this :

You must be registered to see links

Result :

If your friends are offline :

You must be registered to see links

If your friends are online :

You must be registered to see links

I dont know if this already was released, anyways, have fun with it.

If you want another thing, that isn't already released for revcms, ask for it, maybe i can make it for you!

Have a nice day,

Mozilla.

 

[DutchenL]

mysql_real_escape_string ever heard of that?

 

[Mozilla2]

mysql_real_escape_string ever heard of that?

Yeah, why?

 

[Gin0]

If you wan't me to hack your hotels, use this.

 

[Ray Boccino]

There's no user input, how could you hack this? It's secure.

 

[Mozilla2]

If you wan't me to hack your hotels, use this.

Well, try then..

You must be registered to see links

 

[Spot Ify]

Lol theres no exploits learn read code lol. I think that they think that you can do mysql_query("select abla lbla ") but php will never run that lol you just get that as text at your browser. And its also impossible to set SELECT * ftom blavla bla in your username because the echo is not in a query.

 

[ImNotSatan]

Well, try then..

You must be registered to see links

LOL:

U gebruikt een proxy, dus donder maar mooi op.

I dont even use a proxy

________________
This is secure code.. How could this be injected lol? There's 0%, well ur user id, but u cant modify that xD

 

[Mozilla2]

LOL:

U gebruikt een proxy, dus donder maar mooi op.

I dont even use a proxy

________________
This is secure code.. How could this be injected lol? There's 0%, well ur user id, but u cant modify that xD

Yeah, i was making something else, proxy alert is now gone tho. I can upload the CMS again if you want? ;d

 

[JerryCool]

It's already released but Thanks for the re-release, I guess

 

[Mozilla2]

It's already released but Thanks for the re-release, I guess

Link of the topic? I never found it since i was looking for it

 

[JerryCool]

http://forum.ragezone.com/f353/php-friends-online-879158/