Jump to content

Giving my service


Recommended Posts

well hi am new to this forum and this topic is about me giving my service ill be securing files and alot more

secure per file - £2.00

Bug/error fixing per file - £0.50(depends on the bugs if it big or small.)

ALOT MORE but these are for now

i have seen a post from some one called Ben and want to seperate confusion don't think i am him i just thought ill help people out...

and also i accept only via paypal please dont PM or anything saying i will pay this/that via a different Source..

Edited by xFusion
Link to comment
Share on other sites

The problem here, is that I don't think anyone knows you and to trust you right away on your knowledge of php,mysql or any other language would be not smart. Do you have examples you can post to show us some work you have done? It is strange that you came on right away after Ben posted and jumped to that conclusion without being on this community.

Link to comment
Share on other sites

Okay i will make a quick something for you to judge on


//Securing the $_GET vars (btw just made it for numeric style now securing the number )

$_GET['ID'] = ( isset($_GET['ID'])&&is_numeric($_GET['ID']) )?abs(intval($_GET['ID'])):'';
    if ( empty($_GET['ID']) ) {
  echo 'error message here';

//Securing $_POST (Numeric Style securing the Numbers)

$_POST['blah'] = ( isset($_POST['blah'])&&is_numeric($_POST['blah']) )?abs(intval($_POST['blah'])):'';


This is just $_POST and $_GET vars

this is another example

$_POST['blah'] = mysql_real_escape_string($_POST['blah']);

$_POST['blah'] = mysql_real_escape_string($_POST['blah']);

should be enough for you to judge on :P

Edited by Dominion
Changed to php tags
Link to comment
Share on other sites

well W3 i jumped on this thought its a decent community will get something for my self and can build up my repititon i know people wount trust me right away but i have to make a start somewhere or another to be able to build up

Well no you Didn’t “just jump onto this community” now did you? I will pm about this.

That aside, no it's not enough. Do you have any past works you can post?

Link to comment
Share on other sites

Huh I wonder what you mean by that though Dominion? Is he another past account that is hiding? or a multi?

Same ip as “scorpiic venom” (http://makewebgames.io/member.php/66700-scorpiic-venom), but he claims they are college friends, and they are both on dynamic ips, so for now I am just going to keep in eye on it. Yes I did ask permission to post this fact.

Link to comment
Share on other sites

his quick security mock up seems it could be 1 of the few things

1. He looked at a previous post and copy/pasted

2. Everyone checks if isset and is_numeric then wraps it in abs(intval())

3. I am wrong or that is how he was taught

4. I am completely wrong

Reason why i say this is because in most security posts or mods that claim to be secure i see the same code

$_GET['varhere']=isset($_GET['varhere']) && is_numeric($_GET['varhere']) ? abs(intval($_GET['varhere'])) : '';

lol its like its burned into my brain

anyway if i am wrong a few tips

1. You should leave abs() off not sure if you know what it does but it returns the absolute value of a number.

--- So I would leave it up to the owner if they wanted positive or negative numbers only.

--- You could screw something up in their database a wrong value is inserted because the number was positive and they were looking for negative.

2. Change the '' to NULL

--- Because you are setting the variable if you have it as '' which will cause isset($_GET['varhere']) to return true in all code after that. And the owner may check later to see if its set.

Edited by bluegman991
Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Create New...