FlyForFrance - CMS Final n

xDDD I'm this hacker :O sry chek security xD
I'm only test the web to look the security the bug is:
Only register, go to User panel... You can edit news... post alert and html code to redirect and web is hacked...
 
Hello !

Security fixed, just a little forgotten on my part on access.

Thank you for your understanding,
FlyForFrance Team.
 
this isnt ment as an offence but dude

just add the

Thank you for your understanding,
FlyForFrance Team.


thing to your sig instead of posting it over and over

the way you talk in your posts acompanied with it is just atempt to advertise your server

im sick of scrolling through RZ and seeing what I call "passive" rule breakers who break the rules but seem to go unnoticed because of the way they do it
 
Hello,
i tested your Page.
The Notic are Nice, but i have 2 warning look:

Warning: mysql_num_rows(): supplied argument is not a valid MySQL result resource in C:\AppServ\www\test\inc\functions.osa.inc.php on line 197

Warning: mysql_fetch_assoc(): supplied argument is not a valid MySQL result resource in C:\AppServ\www\test\inc\functions.osa.inc.php on line 199


Screen:

elverloon - FlyForFrance - CMS Final n - RaGEZONE Forums



Picture is to big for that side to post it as Image....
 
Hello,
i tested your Page.
The Notic are Nice, but i have 2 warning look:

Warning: mysql_num_rows(): supplied argument is not a valid MySQL result resource in C:\AppServ\www\test\inc\functions.osa.inc.php on line 197

Warning: mysql_fetch_assoc(): supplied argument is not a valid MySQL result resource in C:\AppServ\www\test\inc\functions.osa.inc.php on line 199


Screen:

elverloon - FlyForFrance - CMS Final n - RaGEZONE Forums



Picture is to big for that side to post it as Image....

Post what query is being fetched on line 197 or 199 (Should be close before the mysql_fetch_assoc line) It is probably an error due to a field in the query not matching a field in the database.
 
here:

$aPlayerName[0] = mysql_num_rows($rExecute);//<-----197

for ( $i = 0; $aRowData = mysql_fetch_assoc($rExecute); $i++ ) //<----- 199
{
$aPlayerName['name'][$i] = strtolower( $aRowData['flyff_charactername'] );
$aPlayerName['charname'][$i] = $aRowData['flyff_charactername'];
$aPlayerName['level'][$i] = $aRowData['flyff_level'];
$aPlayerName['level2'][$i] = RealLevel( $aRowData['flyff_level'], $aRowData['flyff_jobid'] );
$aPlayerName['class'][$i] = $aRowData['flyff_jobid'];
$aPlayerName['gender'][$i] = $aRowData['flyff_gender'];
}


197-207

the // is not in the php data
 
this web site have error

Warning: mysql_num_rows(): supplied argument is not a valid MySQL result resource in E:\AppServ\www\inc\functions.osa.inc.php on line 422

Warning: mysql_num_rows(): supplied argument is not a valid MySQL result resource in C:\AppServ\www\inc\functions.osa.inc.php on line 472

Warning: mysql_fetch_assoc(): supplied argument is not a valid MySQL result resource in C:\AppServ\www\inc\functions.osa.inc.php on line 475
 
Back