Quote:
|
Originally Posted by Broda
This is the solution I would suggest.
All that nonsense about constantly renaming your folders, and redirecting non-ref-url traffic.. do any of you guys discussing this actually submit free sites or galleries? jeeez....
|
just in case anyone was going to try and implement this, don't jsut do it blindly - for eg in my example, you're passing a GET variable directly to mysql which is always a bad idea....
so at least replace
Code:
$query="SELECT mime, file FROM images WHERE id=".$_GET["id"];
with
Code:
$query="SELECT mime, file FROM images WHERE id=".mysql_real_escape_string($_GET["id"]);
Don't want to opening up a security hole there now