Quote:
Originally Posted by Warmonger1337
Stay away from PHP scripts. PHP is the easiest language to manipulate and exploit. The less, the better.
|
couldnt disagree more, ur confusing php's abilities with the coders lack of knowledge of the code. its only exploitable if the programmer doesnt take the necessary precautions to secure the code, the biggest mistake being lack of sanitation of user input.
if the code is secured properly, then its no more exploitable then any other web programming language, and far more powerful then most
here is a little code i use to see which characters have been played on by IP, run this in query analyzer, select 'character' from the drop down box in the menu bar:
Code:
SELECT login_time,user_no,wlevel,user_ip_addr, character_name AS Expr2
FROM user_character
WHERE (
user_ip_addr
=
0x00000000
)
OR
(
character_name
=
'CharName'
)
put in the characters name where it says CharName, run query, then select the user_ip_addr once u run it and copy it, and paste that where it says 0x00000000 then run it again, and you will get a list of all characters that have logged in last from that IP address. this is actually a very barbaric way of doing it, but effective still, u could write a simple procedure to automate this, i just havent bothered with it.