Secured Player Report

[Kieran-R]

Hey.

Im trying to learn security, and i've tried to secure the player report on my own. here it is:

 

You're unable to view this code.

Viewing code within this forum requires registration, you can register here for free.

 

Im sure that is secure, but if you think otherwise, please tell me where I went wrong!

Thanks

[Equinox]

Well, you're using sprintf() on a query but not formatting it for a start.

You're using mysql_real_escape_string() on a number also, here's how I'd do it....sort of:

 

You're unable to view this code.

Viewing code within this forum requires registration, you can register here for free.

[Danny696]

Why check if its a string equniox? Its a number oO

[Equinox]

'report' isn't.....

[Danny696]

Ahh, my misunderstanding/

[Kieran-R]

thanks Equinox for the tip!

But is the code I posted secure? Because I have done something similar to a few other files on my game.

[Kieran-R]

Original post has been updated...

[Kieran-R]

If someone could tell me if the updated post is secured, then that would be great!