User Profile

sHyuAn · Dec 2 '09, 02:56 PM

Thanks markus for pointing me to the site.. :)

sHyuAn · Dec 2 '09, 02:15 PM

To: Dormilich,

Can I use the below way to prevent injections?

Code:

$MailUser = sprintf("INSERT INTO mail VALUES ('', 0, 0, %u, unix_timestamp(), 'Forum Subscription', 'Please view your forum subscriptions, a new post has been made!')", $mail['userid']);

$db->query($MailUser);

sHyuAn · Dec 2 '09, 12:09 PM

But if the stripslashes is not there, it will cause the same problem with those slashes like "Have a nice day\r\nHave a nice day". I am very new to web development. Learning through online. Hope to learn more by asking questions. And would you mind to brief me or gimme an example on how to secure the DB?

And, yeah you are right.. Latin1 is used.

sHyuAn · Dec 2 '09, 11:19 AM

The below is the part for notepad that i inserted in php codes. Thanks for your kind help. :)

Code:

<?php
if(isset($_POST['pn_update']))
{
$db->query("UPDATE users SET user_notepad='{$_POST['pn_update']}' WHERE userid=$userid");
$ir['user_notepad']=stripslashes($_POST['pn_update']);
print "<br /><b>Memorandum Updated!</b>";
}
print "<fieldset style='border:

...

User Profile

Profile Sidebar

Leave a comment:

Leave a comment:

Leave a comment:

Leave a comment:

html notepad (help)