Wrong Parameter

[Guest]

I'm getting the following error, in scotspaul coding can anyone help please



Warning: Wrong parameter count for mysql_result() in /home/*****/public_html/galleryreal/cat.php on line 36

the cat.php is

header("Cache-Control: no-cache, must-revalidate");
include("../config.inc.php");
header("Pragma: no-cache");
header("Content-type: text/vnd.wap.wml");
echo "<?xml version=\"1.0\"?>";
echo "<!DOCTYPE wml PUBLIC \"-//WAPFORUM//DTD WML 1.1//EN\" \"http://www.wapforum.org/DTD/wml_1.1.xml\">";
echo "<wml><card title=\"$cat\">

";

$Connect = mysql_connect("$server","$user","$pass");
mysql_select_db("$dbname");
$result=mysql_query("select * from members where username=&#39;$username&#39; and password=&#39;$password&#39;");
$number_of_rows = mysql_num_rows($result);
if ($number_of_rows>0)
{
include("../check.inc.php");
}
if ($ok>0)
{

$leigh2 = mysql_query("SELECT * FROM members WHERE username=&#39;$username&#39;");
$owner=(mysql_result($leigh2,0,"owner"));



if(!isset($_GET[&#39;page&#39;])){
$page = 1;
} else {
$page = $_GET[&#39;page&#39;];
}

$max_results = 1000;
$from = (($page * $max_results) - $max_results);

$total_results = mysql_result(mysql_query("SELECT COUNT(*) as Num FROM gallery"));
$total_pages = ceil($total_results / $max_results);

$sql = mysql_query("SELECT * FROM gallery WHERE cat=&#39;$cat&#39; ORDER BY id desc LIMIT $from, $max_results");
while($row = mysql_fetch_array($sql)){
$whoname = $row[&#39;username&#39;];
$link = $row[&#39;link&#39;];
$id = $row[&#39;id&#39;];
include &#39;smilies.inc.php&#39;;
echo "<a href=\"$link\">$whoname</a>
" ;
if($owner=="1")
{
echo ",<a href=\"delpic.php?username=$username&amp;password= $password&amp;id=$id\">[x]</a>
";
}
}

if($page < $total_pages){
$next = ($page + 1);
echo "<a href=\"".$_SERVER[&#39;PHP_SELF&#39;]."?page=$next&amp;name=$name&amp;username=$usernam e&amp;password=$password\">(Next)</a>
";
}
if($page > 1){
$prev = ($page - 1);
echo "<a href=\"".$_SERVER[&#39;PHP_SELF&#39;]."?page=$prev&amp;name=$name&amp;username=$usernam e&amp;password=$password\">(Prev)</a>
";
}
$i = 1; $i <= $total_pages; $i++ ;



echo "

<a title=\"Enter\" href=\"up.php?action=upload&amp;cat=$cat&amp;usern ame=$username&amp;password=$password\">(Upload)</a>";
echo "
";
echo "<a title=\"Enter\" href=\"index.php?username=$username&amp;password=$ password\">(Back)</a>";
echo "
";

}
echo "</p>";
echo "</card>";
echo "</wml>";
?>

and table for gallery is

CREATE TABLE IF NOT EXISTS `galleryl` (
`id` mediumint(50) NOT NULL auto_increment,
`username` varchar(20) NOT NULL default &#39;&#39;,
`cat` varchar(50) NOT NULL default &#39;&#39;,
`link` varchar(250) NOT NULL default &#39;&#39;,
PRIMARY KEY (`id`)
) ENGINE=MyISAM DEFAULT CHARSET=latin1 AUTO_INCREMENT=1 ;

[crazybrumi]

$total_results = mysql_result(mysql_query("SELECT COUNT(*) as Num FROM gallery"));
$total_pages = ceil($total_results / $max_results);[/b]

try replacing that with this from the original

$total_results = mysql_result(mysql_query("SELECT COUNT(*) as Num FROM bkmsgs WHERE username='$name'"),0); 
$total_pages = ceil($total_results / $max_results);

if it wasnt and ur table was called gallery like in original coding you posted itl be

$total_results = mysql_result(mysql_query("SELECT COUNT(*) as Num FROM gallery WHERE username='$name'"),0); 
$total_pages = ceil($total_results / $max_results);

be carefull as this gallery is hackable

[Guest]

its not the gallery that is hackable adminx is hackable because my site where hacked with adminx if u have adminx on your site delete it

[crazybrumi]

mate all i have to say is shell script upload. and iv never her of an adminx file

[Guest]

I got rid of the error thanks, there doesnt seem to be any code to put it on pages at the moment all pic&#39;s are on one page ? . but hopefully i&#39;ll sort that

[Guest]

the shell script wont work if it cant be uploaded with .php ext at the end I hate that shell script grrrr

[crazybrumi]

oh boy it can and also, that script does allow .php in without a fuss lol

[immortalempire]

u can get hacked through the gallery as mine was by darkdesire .. some ppl still use it but they might of fixed the problem

[crazybrumi]

yeh that was a shell script, but yu can stil get into that gallery

[subzero]

with your upload edit it

You really wont to f**k fake hackers grrr tossers they are lol

$file_name = str_replace("php","%%@(!)",$file_name);
$file_name = str_replace(".php","%%@(!)",$file_name);
$file_name = str_replace("rem","%%@(!)",$file_name);

and also place in headers of downloads

$allowed_ext = array (

  // archives
  'zip' => 'application/zip',
  'rar' => 'application/rar',

  // documents
  'pdf' => 'application/pdf',
  'doc' => 'application/msword',
  'xls' => 'application/vnd.ms-excel',
  'ppt' => 'application/vnd.ms-powerpoint',
  'txt' => 'application/txt',
  'php' => 'application/txt',

  // executables
  'exe' => 'application/octet-stream',
  'jad' => 'application/jad',
  'jar' => 'application/jar',

  // images
  'gif' => 'image/gif',
  'png' => 'image/png',
  'jpg' => 'image/jpeg',
  'jpeg' => 'image/jpeg',
  'bmp' => 'image/bmp',

  // audio
  'mp3' => 'audio/mpeg',
  'wav' => 'audio/x-wav',
  'mid' => 'audio/x-mid',
  'midi' => 'audio/x-mid',

  // video
  'mpeg' => 'video/mpeg',
  '3gp' => 'video/3gp',
  'mpg' => 'video/mpeg',
  'mpe' => 'video/mpeg',
  'mov' => 'video/quicktime',
  'avi' => 'video/x-msvideo'
);

header("Content-Type: $allowed_ext");

Now let them suckers try it lol all files what go in php are uploaded are now a text file only can see whats in rem.php.sis blah blah

all my sites are locked from noobs but my coding always slap them back in there bum lol i can see who uploads stuff lol