block someone to ban id=0

[ewanz]

some people tell they are harkerz by use the trick ban the id=0 , it must be your staff that cheats u behind... anyone can help me how to fix this problems...

[thunderwap]

what script u using?

[crazybrumi]

if($id=0){
echo"You Cannot bann a user that Cant exist";
exit();
}

[sham08]

if(($who=0) || ($who="")){
echo"You Cannot bann a user that Cant exist";
exit();
}

[Guest]

what script u using?

probably Lavalair 100%

[thanatos]

why not just use

$who = int($_GET['who']); $user = SELECT COUNT(*) FROM users WHERE id='".$who."' if($user[0]=='0'){ user does not exist }

tell me if i uses int function incorrectly..

[CreativityKills]

Wrong.
$who = (int) $_GET['who'];
$who = is_user($who) ? $who : FALSE;
if( ! $who)
exit('Stupid ****, ure being logged out and locked out. Heeheehee');

[thanatos]

yes thats it :-)

[ewanz]

why not just use

$who = int($_GET['who']); $user = SELECT COUNT(*) FROM users WHERE id='".$who."' if($user[0]=='0'){ user does not exist }

tell me if i uses int function incorrectly..

yeah..i mean i like this.. staff can't ban user id=0 and the user id that over the count of user..

[ewanz]

lavalair...

[djlee]

id is auto incremented, unless you create a user specifically on the id 0 record then it wont exist, therefore "update users set banned=1 where id=0" will result in a bool false or zero affected rows and will have no effect, any other result contradicts basic sql and you either have a stupid permissions system and deserve to be hacked or your not type casting the id before use allowing a hacker to inject sql code to complete a ban sql stamemnt on a valid id record

[kiLLeR-eyEd_14]

if(empty($uid) OR !isuser($uid))
echo "You are not logged in"; 

[ewanz]

id is auto incremented, unless you create a user specifically on the id 0 record then it wont exist, therefore "update users set banned=1 where id=0" will result in a bool false or zero affected rows and will have no effect, any other result contradicts basic sql and you either have a stupid permissions system and deserve to be hacked or your not type casting the id before use allowing a hacker to inject sql code to complete a ban sql stamemnt on a valid id record

yeah...it is true.. i have try before.. that is stupid trick to ban sql statement on valid id record

[Anthony]

lol i have seen sites with this function but so far none works