Jump to content
MakeWebGames

[mccode] Profile Signatures


on_fire

Recommended Posts

  • Replies 68
  • Created
  • Last Reply

Top Posters In This Topic

Re: [mccode] Profile Signatures

 

I used Joel's v2 profile sig mod but i get this error when i go into preferences and then click on profile signature.

Fatal error: Call to undefined function signature_change() in /home/urbanwar/public_html/preferences.php on line 43

Just means that you don't have the correct spelling or the function in the preferences.php page

I would suggest going through it and checking on where that functyion starts./

Link to comment
Share on other sites

Re: [mccode] Profile Signatures

 

I used Joel's v2 profile sig mod but i get this error when i go into preferences and then click on profile signature.

Fatal error: Call to undefined function signature_change() in /home/urbanwar/public_html/preferences.php on line 43

Just means that you don't have the correct spelling or the function in the preferences.php page

I would suggest going through it and checking on where that functyion starts./

it happens to the best of us :-D

Link to comment
Share on other sites

  • 3 months later...

Re: [mccode] Profile Signatures

Parse error: syntax error, unexpected $end in /home/corrupted-warz/public_html/preferences.php on line 199

it keeps coming up that right and i keep trying stuff but the line 199 has got ?> but i think there is ment to be more there and i have done something to it or something like that can you help me please

Link to comment
Share on other sites

  • 3 months later...
  • 2 weeks later...

You're unable to view this code.

Viewing code within this forum requires registration, you can register here for free.

...into

You're unable to view this code.

Viewing code within this forum requires registration, you can register here for free.

simple is it not?

considering this modification does not look secure in the slightest i would recommend not using it, i have posted earlier afew simple functions on another post which may help against simple attacks.

Considering i could easily take control of your website and even make you make me admin from anyone using this code.

Link to comment
Share on other sites

Good point i did direct them to a previous post without a link, Simply you have no protection on the inputted string which will allow users to do almost anything.

Allowing HTML in signatures could be auto refreshed to viruses or simply make you make them admin using a simple Injection (which i will not post).

A obvious but very rarely used protection against attacks like this would be the very well known striptags() function which only allows what code you direct it to allow.

There maybe a newer way of doing this but i have been away from PHP for afew months now and am working on old experience with Signature being one of the most exploited things i found on MC codes. Other solutions could involve only allowing Alpha and Numeric chars to be inputted which would stop the simple decoding of chars to make a HTML string work with striptags included.

Researching possible ways your code can and will be attacked is about 80% of the whole idea of coding something. Everyone wants a easy way of doing something and every little 12 year old can easily get a injection from google. They see it as a game yet you should look at it as your business.

htmlentities()

striptags()

ctype_alnum()

search on http://www.php.net

3 helpers which i consider my favorites against wannabe hackers

Link to comment
Share on other sites

HTML in forums or Signatures is always a bad thing not everyone is nice and stick to the rules whilst others like to place onloads into a html tags and have your page redirected. tick with BBCODE if you want my advice...

BBcode is better than nothing (but it can be just as bad as HTML if you use a crappy BBcode engine).

http://htmlpurifier.org/

I've never used HTML Purifier, but I've heard good things about it.

Link to comment
Share on other sites

  • 1 year later...
  • 2 weeks later...
  • 2 weeks later...
  • 10 months later...

Wow I was just going through this thread, and reading the old posts I made about not posting up my code for the sigs code I had, now I wish I had. Shut down my game years ago, thinking of coming back as a classic (actually working on a MMORPG these days), but the hard drive I had the code on was stolen and disk backup was lost years ago. :(

Link to comment
Share on other sites

  • 5 months later...

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


×
×
  • Create New...