[WARNING]Don't use Vsro Reg page v2

[LastThief*]

Originally Posted by Schickl

Nice function, but urls are decoded by the server and shouldn't do any harm at all

And writing a function that just replaces invalid chars isn't really good imo
Easiest thing would be to use a regex(or create 2 loops and one array with the valid chars and check every single character yourself; could be a little faster) to check if it only contains the chars you want and if it doesn't, the query isn't even executed to avoid some random data in the db

Well nice idea too but I prefer this one.It's securing the variables nicely no one will be able to input ( ' ) it will be automatically replaced with ( " ) so no one will be actually able to do evil queries.

[JamalXd]

fixed easy.
(local)/SQL....

use USER DNS Fixed.

[ThElitEyeS]

Originally Posted by LastThief*

ctype_alnum is actually fail use something like this

PHP Code:

    function ms_escape_string($data)
    {
        if (!isset($data) or empty($data))
            return '';
        if (is_numeric($data))
            return $data;
        
        $non_displayables = array(
            '/%0[0-8bcef]/', // url encoded 00-08, 11, 12, 14, 15
            '/%1[0-9a-f]/', // url encoded 16-31
            '/[\x00-\x08]/', // 00-08
            '/\x0b/', // 11
            '/\x0c/', // 12
            '/[\x0e-\x1f]/' // 14-31
        );
        foreach ($non_displayables as $regex)
            $data = preg_replace($regex, '', $data);
        $data = str_replace("'", "''", $data);
        return $data;
    } 


to escape the data before sending it

i know this function before years.
as i said i tested my reg page under php 3.5.10 its 100% safe.

[LastThief*]

Originally Posted by ThElitEyeS

i know this function before years.
as i said i tested my reg page under php 3.5.10 its 100% safe.

before years ? and php 3.5.10 ? everybody uses atleast php 5+ and as Shickl said \' will escape your security dude don't struggle every one is making mistakes

my function will escape the data for real lol

[ThElitEyeS]

who want to see come at tv.

[PortalDark]

Originally Posted by ThElitEyeS

i know this function before years.
as i said i tested my reg page under php 3.5.10 its 100% safe.

since php 4 there were removed lots of bug and exploits, and most involve injection and MSSQL
use lastest php

[LastThief*]

TONS of functions were removed in php 4+ php 3 is not really preferred lol

[ThElitEyeS]

warning is fake until its approved by them on my pc.

[ThElitEyeS]

first gay appear.
not surprised

[Schickl]

Originally Posted by ThElitEyeS

first gay appear.
not surprised

You're small-minded
Accept the fact that your site isn't perfect(in fact it's far away from that) and that it's vulnerable

Instead of acting like an idiot denying that it is you could just spend like 5 minutes and fix your ******* site

[PortalDark]

Originally Posted by ThElitEyeS

warning is fake until its approved by them on my pc.

first you say php 2.5 is the best and best bugless php
now the warning is fake just because you don't find a way to understand it?

[ThElitEyeS]

Originally Posted by PortalDark

first you say php 2.5 is the best and best bugless php
now the warning is fake just because you don't find a way to understand it?

from where you getting this ****.
if you don't understand talk about your self not about others
i guess you should use glasses
i never said 2.5 is the best.
i said i use 3.5.10.

Accept the fact that your site isn't perfect

I think you should use glasses too i never said its perfect.

Instead of acting like an idiot denying that it is you could just spend like 5 minutes and fix your ******* site

You just can STFU, or you can come to tv showing me while you inject it so i can release hotfix.

[PortalDark]

Originally Posted by ThElitEyeS

from where you getting this ****.
if you don't understand talk about your self not about others
i guess you should use glasses
i never said 2.5 is the best.
i said i use 3.5.10.

guess I cant make you realize the mistake you are doing by saying that warning is fake
lastthief and Schickl already prove it to you,so warning is real
but i guess i dont need to stay here watching you argue about "fake" warning

[vorosmihaly]

seriously,this topic has turned to be a funny topic xD

[ThElitEyeS]

Originally Posted by PortalDark

guess I cant make you realize the mistake you are doing by saying that warning is fake
lastthief and Schickl already prove it to you,so warning is real
but i guess i dont need to stay here watching you argue about "fake" warning

good for you