New PHP Script.. Test it out will ya?

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • Dynamix
    G F Y not
    • Jan 2004
    • 2910

    #1

    New PHP Script.. Test it out will ya?

    Let me know if you run into any problems..

    http://www.dxan.com/cobra/

    TGPFactory Full TGP Design & Installation Services
    ICQ 250 142 484 · AIM TGPDynamix · Email: patrick (at) tgpfactory (dot) com
    See who I am at AdultWhosWho.com!
  • jawanda
    Confirmed User
    • Feb 2003
    • 6040

    #2
    no problems, looks good man.


    Comment

    • mynetporn
      Confirmed User
      • Jun 2004
      • 1154

      #3
      Seems to work ok. Nice job.

      Comment

      • sean416
        Confirmed User
        • Feb 2004
        • 3633

        #4
        looks good dude, good job.

        ServerProvider.com

        Comment

        • ProjectNaked
          Confirmed User
          • Jul 2004
          • 4309

          #5

          Comment

          • Dynamix
            G F Y not
            • Jan 2004
            • 2910

            #6
            Okay two questions then--

            1) At the top of the index there's a thumbnail (the "Latest Photo").. should this link to the photo or to the celebrity gallery it belongs to?

            2) The "This Month" What's New page.. should it show updates in the last 30 days or just in that month, even if it's the 1st of the month?

            Any other suggestions?

            TGPFactory Full TGP Design & Installation Services
            ICQ 250 142 484 · AIM TGPDynamix · Email: patrick (at) tgpfactory (dot) com
            See who I am at AdultWhosWho.com!

            Comment

            • mynetporn
              Confirmed User
              • Jun 2004
              • 1154

              #7
              Originally posted by Dynamix
              Okay two questions then--

              1) At the top of the index there's a thumbnail (the "Latest Photo").. should this link to the photo or to the celebrity gallery it belongs to?

              2) The "This Month" What's New page.. should it show updates in the last 30 days or just in that month, even if it's the 1st of the month?

              Any other suggestions?
              1. If you are going to have ads and such in the gallery then to the gallery. If not then I would say link to the pic.

              2. I would think that "This Month" should only be the current month.

              Side Note: I am really not impressed with all the blue on blue. Maybe add another color or something to make it stand out.

              Comment

              • rickholio
                Confirmed User
                • Jan 2004
                • 1914

                #8
                I'm noticing that a couple of the thumbnails are turning out all black, like here ...
                ~

                Comment

                • iBOUNCER
                  Confirmed User
                  • Nov 2004
                  • 214

                  #9
                  OK, a few security concerns.

                  1) Looks like your just pulling whatever file the user asks for. See: http://www.dxan.com/cobra/image.php?...ges/header.gif

                  This is bad.

                  2) You are not validating input, equally bad; see:

                  http://www.dxan.com/cobra/model.php?...g%20input&id=1

                  You are escaping meta characters, which is a good thing.

                  Let me know if you need any help closing these things up.

                  Otherwise, looks cool
                  Secure PHP Programming - Secure E-Commerce Design
                  Site & Server Security Reviews - Code Reviews

                  The new and improved iBOUNCER. Give us a try.

                  ICQ: 201971159 or http://www.iBOUNCER.com

                  Comment

                  • Dynamix
                    G F Y not
                    • Jan 2004
                    • 2910

                    #10
                    Originally posted by rickholio
                    I'm noticing that a couple of the thumbnails are turning out all black, like here ...
                    Aye, those are from trying to upload GIF's.. I had the ImageMagick functions only working with JPEG's before updating.

                    TGPFactory Full TGP Design & Installation Services
                    ICQ 250 142 484 · AIM TGPDynamix · Email: patrick (at) tgpfactory (dot) com
                    See who I am at AdultWhosWho.com!

                    Comment

                    • swedguy
                      Confirmed User
                      • Jan 2002
                      • 7981

                      #11
                      Originally posted by iBOUNCER
                      OK, a few security concerns.

                      1) Looks like your just pulling whatever file the user asks for. See: http://www.dxan.com/cobra/image.php?...ges/header.gif

                      This is bad.

                      2) You are not validating input, equally bad; see:

                      http://www.dxan.com/cobra/model.php?...g%20input&id=1

                      You are escaping meta characters, which is a good thing.

                      Let me know if you need any help closing these things up.

                      Otherwise, looks cool
                      You beat me to it

                      Comment

                      • iBOUNCER
                        Confirmed User
                        • Nov 2004
                        • 214

                        #12
                        Originally posted by swedguy
                        You beat me to it
                        Hey, that's why I make the BigBucks(TM) as a security consultant to the stars.
                        Secure PHP Programming - Secure E-Commerce Design
                        Site & Server Security Reviews - Code Reviews

                        The new and improved iBOUNCER. Give us a try.

                        ICQ: 201971159 or http://www.iBOUNCER.com

                        Comment

                        • Dynamix
                          G F Y not
                          • Jan 2004
                          • 2910

                          #13
                          Originally posted by iBOUNCER
                          OK, a few security concerns.

                          1) Looks like your just pulling whatever file the user asks for. See: http://www.dxan.com/cobra/image.php?...ges/header.gif

                          This is bad.

                          2) You are not validating input, equally bad; see:

                          http://www.dxan.com/cobra/model.php?...g%20input&id=1

                          You are escaping meta characters, which is a good thing.

                          Let me know if you need any help closing these things up.

                          Otherwise, looks cool
                          Thanks for the input, both flaws have been fixed

                          TGPFactory Full TGP Design & Installation Services
                          ICQ 250 142 484 · AIM TGPDynamix · Email: patrick (at) tgpfactory (dot) com
                          See who I am at AdultWhosWho.com!

                          Comment

                          • xclusive
                            Too lazy to set a custom title
                            • Apr 2004
                            • 35218

                            #14
                            It's looking good a lot of potential...

                            I support MediumPimpin.com / Shemp's Outlawtgp.com /


                            Comment

                            • swedguy
                              Confirmed User
                              • Jan 2002
                              • 7981

                              #15
                              Originally posted by Dynamix
                              Thanks for the input, both flaws have been fixed
                              http://www.dxan.com/cobra/browse.php?type=fname&kw=%

                              Might wanna change so you can only use for example a-z in "kw" and every other var that can only have specific input.

                              Comment

                              • crockett
                                in a van by the river
                                • May 2003
                                • 76818

                                #16
                                looks pretty cool
                                In November, you can vote for America's next president or its first dictator.

                                Comment

                                Working...