How to secure EJATD29 SC

[subzero]

closing your site is a good idea lol

[m4ster_v4]

closing your site is a good idea lol

Ya..... (:
Better study about php 1st before create own wapsite....
With lack of knowledge about php, sql, apache how could you handle ur wapsite...

[subzero]

Ya..... (:
Better study about php 1st before create own wapsite....
With lack of knowledge about php, sql, apache how could you handle ur wapsite...

I agreed, if you wish to learn please learn php,apache,mysql

[awan]

awann

closing your site is a good idea lol

never give up sir
thnx

Added after 5 minutes:

FOR SQL INJECTION
$string = $_SERVER['QUERY_STRING'];
in " http://localhost/sql.php?name=stupid...=N&pass=nopass " this will output : name=stupidname&sex=N&pass=nopass then u can clean the url.
//script eg: u can put it in config.php for global efect

<?PHP
$string = $_SERVER['QUERY_STRING'];
$agent = $_SERVER['HTTP_USER_AGENT'];
$badwords = array('perm=', 'validated=','insert%20into', 'select%20'); // etc
$clean_url = str_replace($badwords,'x',strtolower($string));
$clean_agent = str_replace($badwords,'x',strtolower($agent));
if($string != $clean_url || $agent != $clean_agent)
 header('Location: injection.php');
?>

FOR SHELL
The most safe way is u to have 2 hosts: 1. Where you have the script 2. File hoster
In host 1 u need to have only the uploader form and in the 2nd the php script.
In the 2nd u'll output a url that go to the 1st then add it to sql database.
# u cand rename the new file name in somewhat like md5(time().'****off'.sha1(rand(9999,99999))); then u add it to db for validation ...
...
...
..

good idea sir !! thnx alot!

I agreed, if you wish to learn please learn php,apache,mysql

in progress sir thnx

Added after 3 minutes:

I agreed, if you wish to learn please learn php,apache,mysql

in progress sir thnx

[ewanz]

Other functi0n n0t working if the safe m0de is on...

yess m8... some function not working but it is safety... actually i had my ways how to stop it...

Added after 6 minutes:

give here your register script....