lotto

[Brad]

This is my lotto.

Say if there is some bugs.

No bad comments

This lotto has a very unlikely chance you will win 1-400 chance lol you can change it.

 

Call this file lotto.php

You're unable to view this code.

Viewing code within this forum requires registration, you can register here for free.

[Danny696]

Both your quries arn't finished

[Brad]

think i fixed it danny

[Analog]

Line 31

You're unable to view this code.

Viewing code within this forum requires registration, you can register here for free.

 

Your event_add function call is not closed...

 

You're unable to view this code.

Viewing code within this forum requires registration, you can register here for free.

[Brad]

thanks

[Danny696]

Line 38 needs a ";

[Brad]

thanks and done it

[Danny696]

Whats to stop me doing an sql as $_POST['money'] ;)

[Joshua]

I tend to secure all $_POST and $_GET at the beinning of a script it makes it a bit safer and less likely you set it as safe in the wrong section and it fails.

At bare minimum $_POST['number'] = abs((int) $_POST['number']) always

[Nicholas]

I tend to secure all $_POST and $_GET at the beinning of a script it makes it a bit safer and less likely you set it as safe in the wrong section and it fails.

At bare minimum $_POST['number'] = abs((int) $_POST['number']) always

You're unable to view this code.

Viewing code within this forum requires registration, you can register here for free.

 

that wont secure the $_POST valiable by just putting some lines on top under include "globals.php";

that doesnt really mean its fully secure.

as if you just have 1 line to secure the whole script, someone will get in some way and will beable to edit the users table quite easierly with SQL INJECTION.

its best to secure all valiables. thats what ive been told.

even if its not true, you never know what the future might bring out where you will definatly need to secure everything and not just use 1 small line or a so called function in globals.php or header.php

(the funtions in globals, global_func and header dont work, dont even try to use them)

[Joshua]

Actually Nicholas, you could secure that particular post variable in the header and it would cover the whole script as it's a super global.

So yes, you can secure it one time in the proper location and it globally secures.

Is it the best practice? na, but whether you secure the $_POST variable each time it is used in each query or directly under include('globals.php') at the top of the page it will achieve the same effect and secure exactly the same

Again, this doesnt secure every variable and injection point in the script, but it will secure that particular variable

 

In the entire script after $_POST['variable'] = abs((int) $_POST['variable']);

$_POST['variable'] will always be an integer and only an integer.

Again, this will just secure that variable and not all, but that's what was being discussed so :P

 

:P