Secure a Lava Script (Wapdesire)

[djdevil89]

In this Tutorial i will explain the basics of how to secure a lava script:
1. Lets Remove the Sessions
The easiest way of removing the session in lava is to use

session_start(); 

lets put that at the beginning of every page right after the <?php
ok that still dont removes the sessions right? Thats what we do next
Wapdesire right from the start checks if a session is already existing in a database we need to delete that and start a new session :

  if (isset($_SESSION['sid']))
  {
  mysql_query("DELETE FROM ibwf_ses WHERE id='$_SESSION[sid]'");
  unset($_SESSION['sid']);
  
  }
  else
  {
  $_SESSION['sid'] = $sid;
  } 

ok now we go to every page again you will note the

$sid = $_GET['sid']; 

there we are going to change it to

$sid = $_SESSION['sid']; 

after we have done that you can securly remove the &amp;sid=$sid from the links
We have just removed the sessions from the url congrats
2. Secure posted data like you might have noted there are a lot of $_GET or $_POST statements lets secure them here is a simple function that will do the job simply put it in core.php

function getget($name, $def = '') {
  if (isset($_REQUEST[$name]))
    return $_REQUEST[$name];
  else 
    return $def;
} 

and instead of $_GET or post we use

$pass = getget('pass', $pass);
$user = getget('user', $user); 

for example

3. Lets secure the gallery

use phpthumb for gallery simply look in google for phpthumb then in user profiles or in gallery use it the way how to use it is discribed in the phpthumb file

hope this helps you guys

[icedroplet1987]

thanks allot .. bro, pls also chk this topic. i can give u my files to correct this particular problem.. pls help.. http://coding-talk.com/f16/shouts-5077/

[icedroplet1987]

is it not for arwap script?

[riderz]

u can use this basicly for any script ive done that to lava methos also

[djdevil89]

yeah riderz its fun working with you

[riderz]

lol yea m8 i hope our edit gona be good

[something else]

The above doesnt secure a lava script it just makes it harder for noobs to hack

[Mysterio]

well, thank you! So, djmatrix and riderz are working together? Can't wait to see your work!

[djdevil89]

if it makes it harder for noobs to hack then it is more secure aint it? and mysterio3 yes we work together

[kei_ki7]

i agree with DjMatrix its more secure than to do nothing

[icedroplet1987]

actually, a gr8 tutorial.. to help amost everybody coz, many using lavalair here..// thnx allot sir

[makvanpor2000]

Its better to make it hard than to do nothing

[something else]

if it makes it harder for noobs to hack then it is more secure aint it? and mysterio3 yes we work together

kk just saying isnt 100 percent secure

changing a session is as easy as changing a url to a lot of people including via phone

[Mysterio]

what you making, guys? In what you working?

[riderz]

we'll show when we done