By going through the GUI of your web site, Its hard to say what you have done with your coding to prevent malicious attacks. Google for term XSS, sql injection, etc you may find lots.Oh refer to Php Articles section too. good luck!
Please do not post links, especially not links to pages filled with advertisement. That sort of links can easily bee viewed as Spam or Advertisement and as such they are not tolerated here at TSDN!
Also, do not expect us to do the work for you. Attempt to find security weaknesses in your page yourself and post back if you have any problems or questions.
Moderator
However, I will give you a hint as to what to look for:
Directories with permission set to 777 (gives guests write permission)
POST or GET variables being used without any pre validation.
User being able to post <html> tags directly onto your page. Hint, check out the htmlentities() function
Users being able to type SQL commands in form inputs that get executed on the server without validation.
Passwords being saved without any encryption.
File uploads that do not validate the file. Users could be uploading viruses or other nasty things onto your server.
Thats all I can remember right now but it is not by far a complete list, as I do not expect there will ever be a complete list.
Comment