Jump to content
MakeWebGames

rockwood

Members
  • Posts

    443
  • Joined

  • Last visited

  • Days Won

    15

Everything posted by rockwood

  1. rockwood

    Romewars

    me too very excited
  2. i ve a nice template in bootstrap 4.4
  3. ah okay i am looking for gaming engine can i see your any current project?
  4. what kind of projects do you created yet?
  5. try to use PDO instead of mysqli
  6. Actually i am planning for Laravel Base Gaming Engine Development
  7. i am back ? and ready to do something productive
  8. need me to please
  9. Mccodes is highly painful
  10. Awesome, Best of Luck
  11. nice work Zettieee
  12. why you guys producing smoke form your <3. i was just asking back there, so there is no need for unnecessary argument.
  13. who is the real owner of this template ?
  14. really gr8 work
  15. there is no word 'assumption' in programming. he has not explained there session hacking prevention feature is available or not. How would you say if he is correct.
  16. you didn't mentioned the db connection type & php version you will use for this enhanced version of user registration page.
  17. looks good but not enough
  18. Yes: to avoid having to escape special characters. Lazy programmers will just drop what the user types, straight into the code somewhere and this is what leads to injection attacks. Even if it's not used maliciously, allowing the user to type characters that will conflict somewhere else can be more hassle than necessary. For example, if you decide to create a filesystem directory per user, to store their uploads in, then the username must conform to directory naming rules on that OS (e.g. no \/:*?"<>| on Windows). Once you've avoided clashes like the directory naming one, and stripped out "';% and // to avoid injection attacks, you have removed most punctuation, and "why does someone even need punctuation in their user name"? It was far easier to write a quick regex to validate usernames against [a-zA-Z0-9_] and be done with it, than faff about with figuring out all the possible punctuation that will not clash, or mapping them to other characters in some way. Then, like many things in computing, as soon as enough people start having just letters, numbers and underscores for usernames, and people start making usernames to that spec, it became the de facto standard and self perpetuates!
  19. The Boy Need the shoe, Best of Luck Buddy
  20. its quotes problem
  21. echo is very big tool
  22. in how much you can make this mod ?
  23. // do something like this $user_activation_hash = sha1(uniqid(mt_rand(), true)); function verifyNewUser($user_id, $user_activation_hash) { // if database connection opened if ($this->databaseConnection()) { // try to update user with specified information $query_update_user = $this->db_connection->prepare('UPDATE users SET user_active = 1, user_activation_hash = NULL WHERE user_id = :user_id AND user_activation_hash = :user_activation_hash'); $query_update_user->bindValue(':user_id', intval(trim($user_id)), PDO::PARAM_INT); $query_update_user->bindValue(':user_activation_hash', $user_activation_hash, PDO::PARAM_STR); $query_update_user->execute(); if ($query_update_user->rowCount() > 0) { $this->verification_successful = true; $this->messages[] = MESSAGE_REGISTRATION_ACTIVATION_SUCCESSFUL; } else { $this->errors[] = MESSAGE_REGISTRATION_ACTIVATION_NOT_SUCCESSFUL; } } }
  24. what kind of security issue are you facing ?
×
×
  • Create New...