[Tutorial]Proteger Contra Sql Injection (Ihush)

[Cђ๏รєPєтภคร 865]

Boas comunidade,venho postar umas coisas para proteger o habbo.

Proteger contra SQL INJECTION (iHusH)

1º - Ir no ficheiro index.php e procurar por isto :

if(isset($_GET["user"]))
{
$query = mysql_query("SELECT * FROM bans WHERE value = '".$_GET["user"]."' AND expire > UNIX_TIMESTAMP() ORDER BY expire DESC LIMIT 1");
}
elseif(isset($_GET["ip"]))
{
$query = mysql_query("SELECT * FROM bans WHERE value = '".$_GET["ip"]."' AND expire > UNIX_TIMESTAMP() ORDER BY expire DESC LIMIT 1");
}

e trocar por isto :

if(isset($_GET["user"]))

{
$query = mysql_query("SELECT * FROM bans WHERE value = '".$core->EscapeString($_GET["user"])."' AND expire > UNIX_TIMESTAMP() ORDER BY expire DESC LIMIT 1");
}
elseif(isset($_GET["ip"]))
{
$query = mysql_query("SELECT * FROM bans WHERE value = '".$core->EscapeString($_GET["ip"])."' AND expire > UNIX_TIMESTAMP() ORDER BY expire DESC LIMIT 1");
}

Cumprimentos,ChosePetras

[skeewzz ♛ 245]

Bom Tópico http://cyber-gamers.org/public/style_emoticons/default/451960.gifCumpz:Pedro Reis

[André Rochato 253]

Gostei chose http://cyber-gamers.org/public/style_emoticons/default/451960.gif