Admin files of my program

darkcarnival · #1 (**permalink**) 09-16-03, 03:57 PM

hi,

well i got the admin file finished of my program. and i already got the other files checked so i need this 1 done. now i posted 1 of my other files on here once b4 so let me say this so i wont get ne message.

1. i just want a code check not to run it

2.dont ask for ne other files b/c this 1 is all u need

hope that cleared the air, i just want someone to look at the file and tell me what errors(if any) there are and what line it is to fix it or fix it for me.hope someone will help since all i need is this file checked then i can run it.thx.

(forgot the file its on the new post)

darkcarnival · #2 (**permalink**) 09-16-03, 03:59 PM

heres the file i forgot to add (embrasris)

YourPHPPro · #3 (**permalink**) 09-16-03, 04:38 PM

This might be problematic, since it doesn't appear that you need to be 'logged' in or verified to do anything:

http://www.example.com/admin.php?act...te=Artist&id=*

darkcarnival · #4 (**permalink**) 09-16-03, 04:45 PM

ok then can u help me then with that? i thought that didnt work. thx for telling me that.

YourPHPPro · #5 (**permalink**) 09-16-03, 05:37 PM

Check out:

Secure Programming in PHP
http://www.zend.com/zend/art/art-oertli.php

Or this:

Secure PHP Development: Building 50 Practical Applications
http://www.amazon.com/exec/obidos/tg.../-/0764549669/
http://search.barnesandnoble.com/boo...sbn=0764549669

the|Skrilla · #6 (**permalink**) 09-16-03, 06:50 PM

I didn't run the script, but just looked at the source and have a suggestion about the recurring use of echo.

A far more efficient and cleaner way to echo large blocks of output is to do this:

PHP Code:


			
echo <<<EOF

<html>

<body>

Here is some horribly invalid html!

{$this_is_how_to_include_a_variable}

</body>

</html>

EOF;

note that the echo <<<EOF and EOF; cannot be tabbed in for some odd reason.

YourPHPPro · #7 (**permalink**) 09-16-03, 07:42 PM

Quote:

A far more efficient and cleaner way to echo large blocks of output is to do this:

Or, http://smarty.php.net might even be a better solution

the|Skrilla · #8 (**permalink**) 09-16-03, 07:47 PM

I suppose, but it's kind of complex IMO since this is a single-file script .

darkcarnival · #9 (**permalink**) 09-17-03, 01:07 PM

well i plan to clean-up the echos in v2.0 for now i just want to test and run. but my login is in sessions and the place i got it from didnt give a whole lot of info so i did what i could by looking ar source if you know of a link that helps with sessions that would help thx.also if u got other suggestions feel free to tell me while im still working on the kinks