Help

[kenrickx]

how do i stop them from registering 3thousand names in seconds?they flooding the forum someone help me and when the staff create a club they able to login with that staff name someone help me stop all this

[thunderwap]

how they able to login with staff name?

only way is they knows ur staff passwords or u did not put logs text safe with password or somebody is stealing ur sessions.

[kenrickx]

how would they steal session if i stop all php file to work in avatar?

[i0nutzxp]

put that in register.php ...

        $actime = mysql_fetch_array(mysql_query("SELECT regdate FROM lib3rtymrc_users WHERE browserm='".$ubr."' ORDER BY regdate DESC LIMIT 1"));
  $timeout = $actime[0] + (3*60);
  if(time()<$timeout)
  {
        $tm = time();
        $ramas = $timeout - $tm;
        echo "<p align=\"center\">";
                        echo "<img src=\"images/notok.gif\" alt=\"X\"/><br/><small>Un user cu un browser similar cu al dumneavoastra tocmai s-a inregistrat pe site<br/>Ne pare rau dar va ve-ti putea creea un cont nou peste <b>$ramas secunde</b></small><br/>";
            echo "</p>";
                }else{

# ANTI FLOOD BROWSER #2
$brwsu = explode("$_SERVER",$HTTP_USER_AGENT);
$ubr = $brwsu[0];
$actime = mysql_fetch_array(mysql_query("SELECT regdate FROM lib3rtymrc_users WHERE browserm='".$ubr."' ORDER BY regdate DESC LIMIT 1"));
$timeout = $actime[0] + (3*60);
                if(time()<$timeout)
                {
                        $tm = time();
                        $ramas = $timeout - $tm;
                        echo "<p align=\"center\">";
                        echo "<img src=\"images/notok.gif\" alt=\"X\"/><br/><small>Un user cu un browser similar cu al dumneavoastra tocmai s-a inregistrat pe site<br/>Va puteti creea un cont nou peste <b>$ramas secunde</b></small><br/>";
            echo "</p>";
                }else{

# ANTIFLOOD IP
   $uip = getip();
   $actime = mysql_fetch_array(mysql_query("SELECT regdate FROM lib3rtymrc_users WHERE ipadd='".$uip."' ORDER BY regdate DESC LIMIT 1"));
   $timeout = $actime[0] + (10*60);
         if(time()<$timeout)
          {
   $tm = time();
   $ramas = $timeout - $tm;
   echo "<p align=\"center\">";
   echo "<img src=\"images/notok.gif\" alt=\"X\"/><br/><small>Un user cu un IP similar cu al dumneavoastra tocmai s-a inregistrat pe site<br/>Reveniti peste <b>$ramas secunde</b></small><br/>";
   echo "</p>";
   }else{

//register forms ...

} 

it works nice ... its from a romanian lava edit:P

[kenrickx]

hope it work gonna try it now

[thunderwap]

how would they steal session if i stop all php file to work in avatar?

to stop session hack is not only to stop php file in avatar.

[kenrickx]

it error my register.php


Parse error: syntax error, unexpected $end in /home/yeah/public_html/blaablaabla.com/register.php on line 180

thats the error i get am using wapdesire edit and which other way to stop session hacking?

[i0nutzxp]

For session hack u must use ur own images ( dont steal ) , for download vault files + gallery files make a file down.php with the code :

<?PHP
$fid = (int)$_GET['file_id'];
 $select = mysql_fetch_assoc(mysql_query("SELECT url FROM table WHERE id='".$fid."'"));
  header("Location: {$select['url']}");
?>

edit urserlf ...


//////// kenrickx
one of : { } ( ) is in + or in - ....simple to repair

[something else]

LEARN PHP!!!!!!!!!!!!!!!!!!!!!!!!

You have been given the answer to the problem:

one of : { } ( ) is in + or in - ....simple to repair

you have got the line number:

Parse error: syntax error, unexpected $end in /home/yeah/public_html/blaablaabla.com/register.php on line 180

Stop being lazy and work it out yourself its not hard!

Added after 9 minutes:

and if your really stuck and cant fix problems like this then open your php.ini file and set:

 short_open_tag = On 

that will fix most Parse error: syntax error, unexpected $end problems

[metulj]

.....

 short_open_tag = On 

that will fix most Parse error: syntax error, unexpected $end problems

i dont think that

Short_open_tag = On 

will solve much of errors...

it'll just allowe you to use

<?
.......
?>

instead more correct

<?php
.......
?>

[something else]

i dont think that

Short_open_tag = On 

will solve much of errors...

it'll just allowe you to use

<?
.......
?>

instead more correct

<?php
.......
?>

Im think It also allows you to have open statements which are not closed properly eg:

if($something){
print 'yes';
else{
print 'no';
} 

well i have read it works and seen many people saying it works but i have never tested it myself

Added after 3 minutes:

You can read many pages here saying it works: Parse error: syntax error, unexpected $end Short_open_tag = On - Google Search

[metulj]

Im think It also allows you to have open statements which are not closed properly eg:

if($something){
print 'yes';
else{
print 'no';
} 

well i have read it works and seen many people saying it works but i have never tested it myself
Added after 3 minutes:
You can read many pages here saying it works: Parse error: syntax error, unexpected $end Short_open_tag = On - Google Search

thats all true...
but just

<?...

is basicly open tag for ASP...
and many servers doesnt support it by default anymore...
so it's kind a bad practice to use it i guess...
also it may happen that document started with

<?...

will be parsed as XML document..

[i_love_php_mysql]

sorry if mistaken but i think asp tags are like <% not <?

[CreativityKills]

Whatever! Yal saying junk. Help the kid, kids. Yo kenrick bin a minute. Its catchphrase, i know u hate me. Anyway just use a captcha library in ur registration. That simple. And for the petty sid theft...stick to php sessions. Ive noticed just a few here knw how to grab that or run csrf requests (and thats sad).