TalkPHP
 
 
Account Login
Latest Articles
» cURL Basics
» Securing your PHP applications Part 1
» The way the function rolls
» Database Abstraction with Zend_Db - Part 2
» CSRF POST Token Protection
Advertisement
Associates
Associates
techtuts Darkmindz
CSS Tutorials Tutorialsphere.com - Free Online Tutorials
Boston PHP SurfnLearn
Reply
 
LinkBack Thread Tools Display Modes
Old 05-09-2008, 10:56 AM   #1 (permalink)
The Wanderer
 
Join Date: Mar 2008
Posts: 6
Thanks: 4
Shauny_B is on a distinguished road
Default Registration & Login Script

Hello fellow PHP coders,
I've started working on a hobby i've wanted to do for ages, however, I've come across a problem, I know basic level of php, I'm just wondering if someone would be kind enough to point me in the way, and/or giveme a hand in the hobby i'm doing.

www.Image-Storage.co.uk/register.php
www.Image-Storage.co.uk/login.php

What i'm after is a registration script + login script based off my forms i've created, I know HTML, CSS and some JavaScript, only problem is my PHP knowledge.

(as seen by links given)

Thanks for reading, If you wish to know what my level of php is you can see my attempt of it xD lol

http://www.image-storage.co.uk/Bryan...registerck.txt

Thanks again.
Shaun
Shauny_B is offline  
Reply With Quote
Old 05-14-2008, 11:58 PM   #2 (permalink)
The Wanderer
 
Highway of Life's Avatar
 
Join Date: May 2008
Location: Beware of programmers carrying screwdrivers
Posts: 21
Thanks: 0
Highway of Life is on a distinguished road
Default

You have some SQL Injection vulnerabilities in that code.
add_slashes() is not a sufficient form of sanitisation. -- You should be using mysql_real_escape_string() for your user input (any $_GET/$_REQUEST/$_POST/$_COOKIE etc) variables.
__________________
- Highway of Life
[ Software Engineer | PHP Developer | phpBB.com Team Member ]
phpBB Academy at StarTrekGuide
Send a message via AIM to Highway of Life Send a message via MSN to Highway of Life
Highway of Life is offline  
Reply With Quote
Old 05-15-2008, 06:56 AM   #3 (permalink)
Jim
The Acquainted
 
Jim's Avatar
 
Join Date: Nov 2007
Location: the Netherlands
Posts: 141
Thanks: 1
Jim is on a distinguished road
Default

I think you can easily read this tutorial and get the knowledge for making your script work: Combined Minds > Tutorials > Creating a user login and registration system.

This is a basic tutorial, you might want to read one of the extra tutorials here on talkPHP how to fully prevent people from stealing sessions etc.
__________________
Combined-Minds.net - Nunchaku! Who doesn't like martial arts? =)
Send a message via MSN to Jim Send a message via Skype™ to Jim
Jim is online now  
Reply With Quote
Old 05-15-2008, 06:57 AM   #4 (permalink)
Jim
The Acquainted
 
Jim's Avatar
 
Join Date: Nov 2007
Location: the Netherlands
Posts: 141
Thanks: 1
Jim is on a distinguished road
Default

Double post... Sorry!
__________________
Combined-Minds.net - Nunchaku! Who doesn't like martial arts? =)

Last edited by Jim : 05-15-2008 at 05:32 PM.
Send a message via MSN to Jim Send a message via Skype™ to Jim
Jim is online now  
Reply With Quote
Old 05-15-2008, 05:15 PM   #5 (permalink)
The Wanderer
 
Join Date: Mar 2008
Posts: 6
Thanks: 4
Shauny_B is on a distinguished road
Default

Thanks for your time and effort in your posts, I'll look at those tutorials.

Thanks again
Shaun
Shauny_B is offline  
Reply With Quote
Reply



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT. The time now is 05:34 PM.

 
     

Powered by vBulletin® Version 3.6.8
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Search Engine Optimization by vBSEO 3.1.0