
Haunted Dawg
Members-
Posts
2,933 -
Joined
-
Last visited
Never -
Days Won
1
Content Type
Profiles
Forums
Events
Everything posted by Haunted Dawg
-
Re: [MCCODES V2] Search Forums by Name will add more as i go along [WORKING] I asked illusion's if i could re do this. As the other one was vulnerable to attack's. With this one you can either decide to allow two words must be inputed or not by simply editing a number. Also, when you search, the word you searched for becomes bold. Enjoy. Call this file what ever you like. <?php include_once(DIRNAME(__FILE__).'/globals.php'); echo '<h2>Searching Forum</h2>'; $two_strings_force = 0; if( isset($_POST['search']) ) { $search = htmlentities(mysql_real_escape_string($_POST['search'])); if($two_strings_force != 0) { if(!preg_match('~(.*?)([ ])(.*?)~is',$search)) { echo 'Two words are needed for this to work. Please go back and put in two words.'; $h->endpage(); exit; } } $double = mysql_query("SELECT fp_topic_id,fp_text,fp_poster_name,fp_poster_id FROM `forum_posts` WHERE `fp_text` LIKE('%".$search."%')") or die(mysql_error().' File: '.$_SERVER['PHP_SELF'].' Line: '.__LINE__); echo mysql_num_rows($double).' rows found. The word you searched for has been put in bold. <table cellspacing="0" style="border: 1px black solid;" width="50%"> <tr> <th>Post</th> <th>Poster</th> </tr>'; while($soc = mysql_fetch_assoc($double)) { $str_rep = str_replace($search,'[b]'.$search.'[/b]',$soc['fp_text']); echo ' <tr> <td>[url="forums.php?viewtopic='.$soc['fp_topic_id'].'"]'.$str_rep.'[/url]</td> <td>[url="viewuser.php?u='.$soc['fp_poster_id'].'"]'.$soc['fp_poster_name'].'[/url] ('.$soc['fp_poster_id'].')</td> </tr>'; } echo ' </table>'; } else if( !isset($_POST['search']) ) { $text = ($two_strings_force == 1) ? 'You also need to add two words for the search to run.' : ''; echo ' <span style="color: red;">*</span> Here you can search through out the forum for the words you desire. '.$text.' <form action="'.$_SERVER['PHP_SELF'].'" method="post"> Words: <input type="text" name="search" /> <input type="submit" value="Search Forum" /> </form>'; } $h->endpage(); ?> Just edit the $two_strings_force = 1 if you want them to put in 2 or more words. Uupdated
-
Re: Gang Tags I can create this for you for $5.
-
Re: Newspaper Upgrade [Mccodes V2] yes.
-
Re: Newspaper Upgrade [Mccodes V2] Your staff news has a error. <?php //made by sniko //no re-selling include "sglobals.php"; if($ir['user_level'] > 2) { echo '<font color="#ff0000">[b]Error![/b]</font>'; $h->endpage(); exit; } $_GET['action'] = isset($_GET['action']) && is_string($_GET['action']) ? strtolower(trim($_GET['action'])) : ""; switch($_GET['action']) { case "news": news(); break; case "confirm": confirm(); break; default: print "<font color='#ff0000'>[b]Error! This script requires an action.[/b]</font>"; break; } function news() { global $db, $ir, $c, $h, $userid; print "<h3>Altering Newspaper's Content</h3><hr /> <form action='staff_news.php?action=confirm' method='POST'> Newspaper's Content: <input type='text' name='news_TITLE' value='{$r['news_TITLE']}'> Newspaper's Subtitle: <input type='text' name='news_SUBTITLE' value='{$r['news_SUBTITLE']}'> Newspaper's Left Content: <input type='text' name='news_LEFT' value='{$r['news_LEFT']}'> Newspaper's Centered Content: <input type='text' name='news_CENTER' value='{$r['news_CENTER']}'> Newspaper's Right Content: <input type='text' name='news_RIGHT' value='{$r['news_RIGHT']}'> <input type='submit' value='Add'></form>"; } function confirmadd() { global $db, $ir, $c, $h, $userid; if($ir['user_level'] != 2) { die("403"); } $db->query("INSERT INTO `newspaper` VALUES ('', '{$_POST['news_TITLE']}', '{$_POST['news_SUBTITLE']}', '{$_POST['news_LEFT']}', '{$_POST['news_CENTER']}', '{$_POST['news_RIGHT']}')"); print "The newspaper has been updated!!."; stafflog_add("Updated newspaper"); } $h->endpage(); ?>
-
Re: Mccodes V2 Request Name Changes Your cousin aka pain, know's nothing about hacking. All he did was exploit using a SQL injection and he call's himself "hacker" please. Get a life. As for image's. Only way is if you bypass the file type which i will not tell you how to do. And i don't think you know how to. @ Yaz123, that is very insecure. Just input And every where my name is displayed. I get document.cookie :)
-
Re: Register Review???? I have. Email Validation. IP Checker Email Result My email result is to check similar email's. For example Explode 1 => killah-city Explode 2 => @ Explode 3 => hotmail explode 4 => . explode 5 => com Forming: [email protected] It take's explode 1 and matches it with the database, if no result's were found process. If result's were found we move onto checking the explode 3. If the explode 3 result does not show up in the database, we give them an error. Forming an email like this: [email protected]. Now we check if the explode 5 is resulting. In overall my email system check's email's like this. IF there is something like killah-city in the database proceed to next check IF the explode 3 is different from the one in database. Give error Yes, it sound's complicated. But it work's if user's want to use email's such as [email protected] [email protected] [email protected] Another way i also have for email validation is to actualy send a request to the domain, thus being kk,blah,this.com and if no request return was found, give error. This is also being used on my voting site which is in the work's. Ask MD to post the one to cetwg to check if domain is still active. It help's alot. Altho i never got mine from him.
-
Re: Problem with instaling V2 McCodes Dab's, i have not seen him around for about a year now. Coldblooded is the one who would give support.
-
Re: IM GOD lols So what was the reason of this post with the topic. "IM GOD lols". Then one of your post's. "cause i'm pro?". Your far from pro.
-
Re: An introduction to security Try this. if(isset($dosessh) && isset($_SESSION['attacking'])) { if(isset($ir['attacking'])) { echo 'Stop Running from fights!'; } }
-
Re: An introduction to security if( isset($dosessh) && (isset($_SESSION['attacking']) || isset($ir['attacking']))) should work.
-
Re: Declared As A Business? (UK) In my opinion, it can not be a fraud. You never forced the user to "donate", but, donating does mean like giving to the poor. Yet, majority of us don't give any of the donation's to the poor. So they might think it is a fraud due to that. Just change donation to upgrade.
-
Re: Mccodes V2 Request Name Changes lol. You know nothing about hacking eh?
-
Re: An introduction to security Undefined index's are fixed with "http://www.php.net/isset" and the other's don't know.
-
Re: Apache is hard! Pog1, i told you how to do it. should do it. Contact me on msn, i'll give you the link.
-
Re: IM GOD lols Call this pro programming issues? Related to Killah by any chance? :/ Why bring me into this? :/
-
Re: Apache is hard! I read some where. That you going to need to make your image's url like game/armybase. BTW. Is that bit from the bit i showed you could help?
-
Re: need some help That shoutbox is free.
-
Re: Apache is hard! The script bit. Try it on a simple html file. <script language="php"> Do php scripting here </script> And if any site allow's html input's they best be aware.
-
Re: [McCodes][v2] Event Layout Mod It depend's. He can be good at javascript or good at copying and making it work with mccode's.
-
Re: Apache is hard! php html i suppose. And then contained in the file. <script language="php"> what ever php script you would like to run here </script> Do you know that the above script can actualy be harmfull to a website that allow's html input? xD
-
Re: php Card Duel AlabamaHit, I am updating people on the update's i do. He never posted anything of that sort here.
-
Re: php Card Duel Maybe add a index page :/
-
Re: file's never found. Just a head's up. If $filename is being requested as a $_GET method. You might want to secure your dirname() function.
-
Re: [Help]Scrollbars Emm. 1.- Incorrect. 2.- Incorrect. 3.- Incorrect. 1.- I typed "FireFox vs Internet Explorer" in aardvark ;). 2.- I learned to use a computer when i was 8. And i don't think i own the world. 3.- "MICROSOFT" being the "microsoft" company running window's as there OS. "A** WIPE" being you ;)