Pre-CMS; Security & Speed.

[Predict]

Seen this on many hotels, taking off well . Might design a theme, if I may?

Sure, why not? A lot of people have asked me in PMs and what not.

Haven't tested it, nor likely will I, but the whitespacing you're using in PHP is fucking weird, and I'm speaking professionally here. You know condensing your code to fewer lines by removing line breaks doesn't speed it up at all right? It just makes it look stupid.

Looking at the actual code in a normal formatting, it's not horrible, but it could use some work. A lot of the logic portions seem jumbled or inefficient. You're using ifs in some places where switches or whiles would be more appropriate.

Haha. I do all of my coding in word pad... Hence why everything is aligned incorrectly. Although it is easier for me to understand it and what not. Though I do agree that it can be improved

 

[TheOleg]

some kind of SQL injections are possible
/client.php 6:

mysql_query("UPDATE users SET ip_last = '".$_SERVER["REMOTE_ADDR"]."' WHERE id = '".USER_ID."'");

/register.php 6:

$CheckIP = mysql_query("SELECT ip_reg FROM users WHERE ip_reg = '". $_SERVER['REMOTE_ADDR']."'");

/index.php 40:

mysql_query("INSERT INTO site_news (title,story,published,author) VALUES ('".$title."','".$story."','".date('M d, Y')."','".USER_ID."')");

/index.php 73:

mysql_query("UPDATE site_config SET maintenance = '".$maintenance."'");

 

[Predict]

some kind of SQL injections are possible
/client.php
6:
mysql_query("UPDATE users SET ip_last = '".$_SERVER["REMOTE_ADDR"]."' WHERE id = '".USER_ID."'");


/register.php
6:
$CheckIP = mysql_query("SELECT ip_reg FROM users WHERE ip_reg = '". $_SERVER['REMOTE_ADDR']."'");

Possibly, but $CheckIP is kinda useless (considering people have dynamic and static IP address).

If you feel as if something is wrong. Then at least exploit it before trying to guess if there is a problem.

 

[TheOleg]

Updated previous post. check please

 

[Joopie]

some kind of SQL injections are possible
/client.php 6:

mysql_query("UPDATE users SET ip_last = '".$_SERVER["REMOTE_ADDR"]."' WHERE id = '".USER_ID."'");

/register.php 6:

$CheckIP = mysql_query("SELECT ip_reg FROM users WHERE ip_reg = '". $_SERVER['REMOTE_ADDR']."'");

/index.php 40:

mysql_query("INSERT INTO site_news (title,story,published,author) VALUES ('".$title."','".$story."','".date('M d, Y')."','".USER_ID."')");

/index.php 73:

mysql_query("UPDATE site_config SET maintenance = '".$maintenance."'");

Kind op useless xd

 

[TheOleg]

Kind op useless xd

nope.
if $maintenance = 1"; DELETE users

btw. /index.ph was Admin panel

 

[azaidi]

at least it works

 

[Predict]

nope.
if $maintenance = 1"; DELETE users

btw. /index.ph was Admin panel

Lets just leave it as you know nothing...

at least it works

Indeed it does... ^ ^

 

[Predict]

Started to design and code index.php. There might possibly be an update for PRE-Cms. ^ ^

 

[Grant]

Started to design and code index.php. There might possibly be an update for PRE-Cms. ^ ^

We're getting a PhoenixCF design?

 

[Joopie]

Use a black *copyright sign* instead of a white one...

 

[azaidi]

Predict, i have an request for you.
I hope you have time for it. This is my request:

Can you make a buy hc/buy vip page for phoenixphp? Or can you tell me the queries to use when i make my own? Because i am really noob with mysql queries etc.

Can you do that?

 

[Predict]

We're getting a PhoenixCF design?

It appears that people use this design alot, therefor I thought I'd add my own style to it.

Use a black *copyright sign* instead of a white one...

Yep, I had to login.

Predict, i have an request for you.
I hope you have time for it. This is my request:

Can you make a buy hc/buy vip page for phoenixphp? Or can you tell me the queries to use when i make my own? Because i am really noob with mysql queries etc.

Can you do that?

Probably not...

Images from Pre-CMS Rev. 2. I'll probably start coding .JS and PHP into the website shortly.

 

[Grant]

I'll like the design.. AS LONG AS YOU DO NOT USE GREY AS THE MAIN COLOUR SCHEME.

Give us Coloured content box headers.

 

[Hejula]

It appears that people use this design alot, therefor I thought I'd add my own style to it.



Yep, I had to login.



Probably not...








Images from Pre-CMS Rev. 2. I'll probably start coding .JS and PHP into the website shortly.

Too much spacing looks like a bad edit of Phoenix Theme.

 

[Predict]

I'll like the design.. AS LONG AS YOU DO NOT USE GREY AS THE MAIN COLOUR SCHEME.

Give us Coloured content box headers.

Deal.

Too much spacing looks like a bad edit of Phoenix Theme.

Phoenix has a lot of white space. (

To view the content, you need to sign in or register

)

To-do: I've just got to do news (column) and I'll start adding .JS and php into the new CMS. Expect it to be simple (first release & so on).

 

[Hejula]

Deal.



Phoenix has a lot of white space. (

To view the content, you need to sign in or register

)



To-do: I've just got to do news (column) and I'll start adding .JS and php into the new CMS. Expect it to be simple (first release & so on).

Not on the main pages. It fits on the index / register, and that is because Aaron knows how to design (Y).

 

[Predict]

Not on the main pages. It fits on the index / register, and that is because Aaron knows how to design (Y).

Ofcourse, the design is pretty similar to his.

Here's an idea how everything is going to look.

 

[mmaxwell]

Cannot wait for rev2 sexy as

 

[NoBrain]

Looks like a Phoenix Design edit, but better.