ZapCMS [PHP, OOP, From Scratch]

[Davidaap]

So then instead of posting a fake error message on all of my posts, actually do something to my hotel, yeah?

Cheers.

1. it is not fake:

and why should i do something to your hotel? :blink:

 

[Gangnam]

Should be good, Davidaap is referring to the username field in register. Though, that occurs in uber, and not 'ZapCMS', so..

Hope you finish this, you always let the flamers stop you. You shouldn't make dev threads if that's the case

 

[Davidaap]

Should be good, Davidaap is referring to the username field in register. Though, that occurs in uber, and not 'ZapCMS', so..

Hope you finish this, you always let the flamers stop you. You shouldn't make dev threads if that's the case

He cant secure ubercms, so why should this be safe?

 

[Hejula]

Maybe he hasn't bothered to secure uberCMS. No one has exploited the error yet so why should be bother :L Exploit it and maybe he will patch it.

 

[Davidaap]

Maybe he hasn't bothered to secure uberCMS. No one has exploited the error yet so why should be bother :L Exploit it and maybe he will patch it.

lol thats bad, you need to fix exploits before someone use it..

 

[Matthew]

Maybe he hasn't bothered to secure uberCMS. No one has exploited the error yet so why should be bother :L Exploit it and maybe he will patch it.

If he can't be bothered to do 1 line of code over potentially getting his hotel attacked and ruined then yes, he should be concerned. It would be kind of scary to log on your own hotel some day to see everything deleted, or a random administrator who made him self rank 7.. or.. a table deleted. The list goes on.

 

[Hejula]

If he can't be bothered to do 1 line of code over potentially getting his hotel attacked and ruined then yes, he should be concerned. It would be kind of scary to log on your own hotel some day to see everything deleted, or a random administrator who made him self rank 7.. or.. a table deleted. The list goes on.

I dropped his database 3 times he still didn't care - so why should be be bother about someone hacking.

 

[vLife]

All they are saying he should be concerned about his hotel security.
Even if he does not care, or whatever you did to it.

 

[Gangnam]

I didn't suggest this will be any better, security wise. The error you're referring to, is not a 'simple' SQLi exploit, if even one at all.

 

[Jonteh]

1. it is not fake:

and why should i do something to your hotel? :blink:

Because it takes proof that it works for me to patch it. Anyway, I think it's patched now.

 

[Davidaap]

Because it takes proof that it works for me to patch it. Anyway, I think it's patched now.

it is still not patched, you need to filter de username field

 

[Jonteh]

it is still not patched, you need to filter de username field

I am filtering it lol in several different places. Awkward.

Oh well, new cms will be out soon =p

 

[Davidaap]

I am filtering it lol in several different places. Awkward.

Oh well, new cms will be out soon =p

go to register.php:

search for:
$name = $_POST['bean_avatarName'];

replace with:
$name = mysql_real_escape_string($_POST['bean_avatarName']);

:

 

[Quackster]

Looks nice :

I wish you good luck Jonty. Need any help, PM me :

 

[Jonteh]

go to register.php:

search for:
$name = $_POST['bean_avatarName'];

replace with:
$name = mysql_real_escape_string($_POST['bean_avatarName']);

:

It is

 

[Hejula]

Try using addslashes.

 

[Joopie]

Try using addslashes.

mysql_real_escape_string adds already slashes where needed

 

[Jonteh]

It's okay. I couldn't care less if Zap is dropped or something lol, we take daily backups so the dataloss would be minimal. I probably deserve it anyway =)

 

[Mithex]

It's okay. I couldn't care less if Zap is dropped or something lol, we take daily backups so the dataloss would be minimal. I probably deserve it anyway =)

<sarcasm>Best hotel owner ever </sarcasm>

 

[Hejula]

<sarcasm>Best hotel owner ever </sarcasm>

Who cares if he is good or bad hotel owner, it doesn't effect you if he is bad owner. Go retire like you said you were, you haven't even been less-active like you should be when "semi-retired". Noob!