please help me anyone

[maxwell]

i need to know how to stop this guy from hacking my site i downloaded this site that they have here called masterlava and thisguy just sign up as a normal member and he gets to enter every staff profile and try to hack the site if there is something i need to change or add anyone please help me im now learning so u can explain to me in small words ok thank u all and anthony if u out there its me ryan

[subzero]

ok open core.

find the sign ups

then before sql enters do this

$sql_name = str_replace("\'","-no-",$sql_name);
$sql_name = str_replace("`","-no-",$sql_name);
$sql_name = str_replace('"','-no-',$sql_name);

then the user try's they only can add -no- means you will see it before them lol so banned !!

[maxwell]

ok thanks its a guy name pimp kid will this prevent him or make me see it?

Added after 5 minutes:

br o i dont see sign up i see function register form($ef)

[subzero]

in core mate

[maxwell]

can u do it for me bro wats ur email so i can email it to u

[subzero]

subzero@goowy.com

[maxwell]

i send it bro i have yahoo u got it?

[subzero]

not sure yet too i get home bro ;)

then i will fix it

When i send back it will only be 1 file you only need to replace.

[maxwell]

no bro i send u the details for u to go in and do it for me ok

[subzero]

only thing i need is core.php and sign up


if you going to send in zip to support@oz-au.net

[maxwell]

bro the domain is registered at free hostia i need u to login and change it can u?

[subzero]

change the name? = no i cant

change domain hoster = Can but i do not host domains.

??

[maxwell]

bro is there somewhere where we can chat private let me send u my login details?

[subzero]

i will add support to my site soon

[ori]

just send him the files lol