Register Script

[Warmonger]

I suggest you, try to sql inject it if you succeed, post it. This method i posted will changes the characters that i usually used for sql injection into other characters.The Sql injection will be inserted into the database and not executed.

2

 

Try sql inject my old code above, if you succeed post it. My private site is un-hackable and use other measures. I use mysql_real_escape_string in my private site, but only for queries in which it is intended. Account info isnt case sensitive client -> server so it doesnt matter either way.

 

You can also just push the input off onto a function to be sanitized like so.

 

//Sanitizes AccountIDs & Passwords
//Non-Referenced aswell as Referenced passing of variables.
//Does also return (string) $input
function inputT1 (&$input)
{
$input = preg_replace (/[^a-z0-9_\.]/i, , $input);

return $input;
}

 

There are many ways to do the same purpose. If they want a complete un-hackable site they can purchase a package here => 2