[HELP]Better Security for dk server

[crankdup]

hey guys this is my first post asking for help, and yes ive used the search alot. your not gonna see this alot from me because im trying to learn like the old dev's...but wanna try and avoid SQL injects and get an adminpanel working..for ipbanning. ive tried OSDS but ive been sql injected through that before thats why im asking for just alittle bit of help this time. if anyone has any tips for me to help make a better secure server then please by all means help me out just alittle bit.

props to your work janvier123 but i dont wanna get sql injected again. if you have a fix to help me with it ill use it definately.

[pieter]

basicly

- dont use SA for webscripts
- dont use xampp
- dont leave test php scripts anywhere publicly available on your server
- anti-sql inject any variable that gets used in a query
- for best result run a separate server for web
- backup or replicate data

oh and also try these addons:







for any questions about those topics please reply on dku not here

[Zombe]

Reported pieter for advertising another forum ^^
Sorry bro, rules are rules

[pieter]

uh dku links back to e-pvp, thought that wasnt an issue then?

[janvier123]

Originally Posted by Zombe

Reported pieter for advertising another forum ^^
Sorry bro, rules are rules

Pieter is right, i had this discussion with trane.
Dkunderground it NOT a p-server, so its allowed, it if dont abuse it,
but i cant take responsibility for others

[gedimazs]

Originally Posted by crankdup

hey guys this is my first post asking for help, and yes ive used the search alot. your not gonna see this alot from me because im trying to learn like the old dev's...but wanna try and avoid SQL injects and get an adminpanel working..for ipbanning. ive tried OSDS but ive been sql injected through that before thats why im asking for just alittle bit of help this time. if anyone has any tips for me to help make a better secure server then please by all means help me out just alittle bit.

props to your work janvier123 but i dont wanna get sql injected again. if you have a fix to help me with it ill use it definately.

Just wait for OsDs v2

[pieter]

there are more risks then just OSDS lol.

especially for the ppl using 1 click servers

xampp = litterally asking to e hacked for example

[pa1n]

Thanks for the tools =)

[Zombe]

Wait, I just read the rules again, it says

Originally Posted by S.A.L.O.M.O.N

Advertising your own forum hosted at a free-forum provider is not allowed.

Wait, so does that mean that if its like "blablabla.freeforumhostingorsmth.com" then its forbidden, but if its like "blablabla.com/forum" then its allowed?
Just asking, sorry for off-topic.

[bottomy]

Originally Posted by Zombe

Wait, I just read the rules again, it says


Wait, so does that mean that if its like "blablabla.freeforumhostingorsmth.com" then its forbidden, but if its like "blablabla.com/forum" then its allowed?
Just asking, sorry for off-topic.

Well i know you aren't allowed to post links to other game hacking forums, not sure if it's the same for other forums.


EDIT: I'm pretty sure you can post like official 2moons forums links, so my guess is you're allowed to post links to forums if it's for helping the community. But not if it's going to 'steal' members (a competing forum).

[pieter]

(offtopic)
RE to Zombe:

It's clear to me:

- DKU is NOT hosted on e freeforumhost
- DKU links back to epvp
- DKU is not a private server
- Janvier and trane allready had a discussion about it and it was allowed

(sorry for offtopic, just wanted to clear things up)

[crankdup]

thx pieter, janvier, and zombe...but your right about the whole osds not being that big of an issue...so what program should i use instead of xampp?

[gedimazs]

Originally Posted by crankdup

thx pieter, janvier, and zombe...but your right about the whole osds not being that big of an issue...so what program should i use instead of xampp?

Try to install apache only

[pieter]

apache, php, and if needed enable mod_rewrite and other modules in apache

and take time to configure apache's server.conf and php's php.ini

xampp is made for development purposes not to run a public website!