Djkanna

Ah now I see, you block all proxies (which you shouldn't do anyway) and then use this thing all your users would be blocked as this makes it seem as if the user is using a proxy, in which you are blocking all your users. That makes sense... Right?

I suggest reading the first link in my last post. EDIT: That will work fine. :rolleyes:

W3Theory (mt) Media Temple

What is security? Basic Steps Register Globals Data Filtering Error Reporting Form Processing Database and SQL Sessions Shared Hosts Books, Documentation, Tools, Services Don't think much more is needed to be said. :whistling:

If you'd have looked on the forum you'll have found the answer to this already. Topic locked.

I really like that, maybe I'll put it to good use.

I don't like his music that's it.

I had the same issue, while looking for one for DeveRz. TinyMCE is a litte too much it's more of a 'wysiwyg'/html editor. I came across three that are possible solutions. CKEditor (*basic functionality seems to have a bbcode editor feel to it, however it is a html editor*) Very simple but customizable Seems to be okay, comes with all the bells and whistles.

See! Looks nice George.

Their called bots probably, however add her you may be in. ;) Wrong section by the way. Topic locked; Everyone got the message just like last time.

Change (Line 20 *unedited*): print "<font size=3>In [b]{$ir['bankTIME']}[/b] days you will recieve your total investment of [b]\$".number_format($ir['bankCASH'])."[/b]</font> "; To print "<font size=3>In ".(($ir['bankTIME'] > 1) ? $ir['bankTIME'].' days' : '1 day')." you will recieve your total investment of [b]\$".number_format($ir['bankCASH'])."[/b]</font> "; Just a visual enhancement, after all it isn't days if it's only one day. Place this: if (!in_array ($_POST['cash'], array (1000,10000,50000,100000,250000,500000,1000000,1500000,2500000,5000000,10000000,25000000,50000000,100000000,500000000,1000000000))) { echo 'Sorry that option isn\'t available'; $h->endpage(); exit; } Before (Line 70 *unedited*): if ( $ir['money'] < $_POST['cash'] ) { print "You dont have that kind of money! "; }

You don't pay for the water itself, you pay for the cleaning of said water. However you're more than welcome to head to the sea and fill up a few bottles. :D

http://phpsec.org/projects/guide/

Nice review, and great game! :D P.S: Unless the abbreviation has changed it's 'NEaB' not "NWeAB". :P

Woohoo!

Isn't a game, it's a forum. :P

Urgh, lets hope your still around when I finish my site (yes when). :P Good luck. :)

I envy you. Only time I get to watch them is when it's on Sky occasionally. Hulu has them but then again I cannot access that. :(

Thanks for the review, it's a really good game, and friendly players. If your ever back please stop by the chat, we have some weird and then some interesting conversations. -DJK

Interesting review. :)

And whats the point of using if statements when not needed?

<?php require (dirname (__file__) . '/header.php'); $_GET['action'] = isset($_GET['action']) ? $_GET['action'] : false; switch ($_GET['action']) { case 'uprating' : upRating(); break; case 'downrating' : downRating(); break; default : echo 'Needs an action'; break; } function upRating() { if (!isset($_GET['id']) || !filter_var($_GET['id'], FILTER_VALIDATE_INT)) { echo Message('Invalid user to rate.'); exit; } else { $_GET['id'] = abs(filter_var($_GET['id'], FILTER_SANITIZE_NUMBER_INT)); } $rating = new User($_GET['id']); if ($rating->id == $user_class->id) { echo Message('You can\'t rate yourself'); exit; } mysql_query('UPDATE `grpgusers` SET `ratings` = `ratings` + 1 WHERE (`id` = '.$rating->id.')') or trigger_error(mysql_error(), E_USER_ERROR); echo Message('You gave a +1 rating to this player.'); } function downRating() { if (!isset($_GET['id']) || !filter_var($_GET['id'], FILTER_VALIDATE_INT)) { echo Message('Invalid user to rate.'); exit; } else { $_GET['id'] = abs(filter_var($_GET['id'], FILTER_SANITIZE_NUMBER_INT)); } $rating = new User($_GET['id']); if ($rating->id == $user_class->id) { echo Message('You can\'t rate yourself'); exit; } mysql_query('UPDATE `grpgusers` SET `ratings` = `ratings` - 1 WHERE (`id` = '.$rating->id.')') or trigger_error(mysql_error(), E_USER_ERROR); echo Message('You gave a -1 rating to this player.'); } ?> Not tested(never used GRPG). Nice try Smokey. :thumbsup:

$gangdata['exp_needed']=(int) (($gangdata['gangLEVEL']+1)*247*2); Place it above the $exp in gangs page too.

Congrats on finding a designer. Topic locked as there is no longer a need for it to be open.

I'll have to buy it first, but your on! :thumbsup: