UGN Security
Well, after scouring the internet for a whole of 30 minutes, I decided that nothing out there was exactly what i needed. So I snagged a few tut's and began working...

I fixed up the db i need through phpmyadmin (god bless the gui on that [censored])... See code below:
Code
CREATE TABLE `ugn_applications` (
  `id` int(11) NOT NULL auto_increment,
  `name` varchar(20) NOT NULL default '',
  `nick` varchar(20) NOT NULL default '',
  `email` varchar(50) NOT NULL default '',
  `yob` varchar(4) NOT NULL default '',
  `telephone` varchar(20) NOT NULL default '',
  `address` varchar(100) NOT NULL default '',
  `sections` varchar(100) NOT NULL default '',
  `aim` varchar(20) NOT NULL default '',
  `irc` varchar(20) NOT NULL default '',
  `bbs` varchar(20) NOT NULL default '',
  `moderate` varchar(10) NOT NULL default '',
  `admin` varchar(10) NOT NULL default '',
  `news` varchar(10) NOT NULL default '',
  `other` varchar(10) NOT NULL default '',
  `username` varchar(20) NOT NULL default '',
  `password` varchar(20) NOT NULL default '',
  `comments` varchar(255) NOT NULL default '',
  `country` varchar(20) NOT NULL default '',
  `ip` varchar(15) NOT NULL default '',
  `status` varchar(20) NOT NULL default '',
  PRIMARY KEY  (`id`)
) TYPE=MyISAM AUTO_INCREMENT=2 ;
Upon creating the forum to list data (I made a result first) all i get is "Error on line 20"... Anyone care to take a look?:

Code
<?php
// Change below to your MySQL Host.
$host = "127.0.0.1";

// change below is your assigned mySQL username
$user = "[username]";

// change to the pw below is your assigned mySQL password
$pw = "[password]";

// change to the database you have permission to connect to
$db = "[databasename]";

$mysql_access = mysql_connect("$host", $user, $pw);
?>

<?php
$query = "SELECT * FROM ugn_applications";
$result = mysql_query($query, $mysql_access);
if(mysql_num_rows($result)) {
    // it is true, so let's print the results to the browser
   while($row = mysql_fetch_row($result))
  {
      print("$row[0]
");
  }
} else {
   // false, no results
}
?>

<?
mysql_close($mysql_access);
?>
The section that seems to be giving me the error is:
Code
if(mysql_num_rows($result)) {
    // it is true, so let's print the results to the browser
   while($row = mysql_fetch_row($result))
  {
      print("$row[0]
");
  }
} else {
   // false, no results
}
Do we finally have any knowlegable php/mysql guys here, or do I need to just go shoot myself in the foot?
Code
<?php
// Change below to your MySQL Host.
$host = "127.0.0.1";

// change below is your assigned mySQL username
$user = "[username]";

// change to the pw below is your assigned mySQL password
$pw = "[password]";

// change to the database you have permission to connect to
$db = "[databasename]";

$mysql_access = mysql_connect($host, $user, $pw) or die(mysql_error());
mysql_select_db($db) or die(mysql_error()); // make sure you add this ;)
?>

<?php
$query = "SELECT * FROM ugn_applications";
$result = mysql_query($query, $mysql_access) or die(mysql_error());
if(mysql_num_rows($result)>0) { // if we have results
	while($result2 = mysql_fetch_array($result)) { 
		echo $row[0]."
\n";
		// or you can do echo "{$row[0]}
\n";
		// tag the \n on for readable html ;)
	}
}
?>
<!-- I presume you have html code here -->
<?
	mysql_close($mysql_access);
	// I usually don't mysql_close, at the end of PHP processing the script all mysql
	// connections are killed unless they're persistant
?>
// notice that I added "or die(mysql_error()); " to all the main SQL functions? 
// this can pinpoint the problem &  will print out an error straight from mysql
// don't put these in final versions though, make your own error msg else you'll
// be giving away free information about your query structure & db structure 
// to hackers trying SQL inject attacks.
change $rows to $result2
A few changes I would make.

Code
<?php

$host = "localhost";

$user = "[username]";

$pw = "[password]";

// change to the database you have permission to connect to
$db = "[databasename]";
	
$db = "bflfrq8";

//Why use variables, save on some lines of code.  You can add a auth scriptlet to this later to make sure they are supposed to be here.

mysql_connect($host, $user, $pw)or die(mysql_error());

mysql_select_db($db) or die(mysql_error()); 
$result = mysql_query("SELECT * FROM ugn_applications") or die(mysql_error());
if(mysql_num_rows($result)>0) { // if we have results
	while($result2 = mysql_fetch_array($result)) { 
		echo $result2[0]."
\n";
		// or you can do echo "".$result2[0]."
\n";
		// tag the \n on for readable html ;)
	}
}
?>
<!-- I presume you have html code here -->
<?
	mysql_close($mysql_access);
	// I usually don't mysql_close, at the end of PHP processing the script all mysql
	// connections are killed unless they're persistant
?>
// notice that I added "or die(mysql_error()); " to all the main SQL functions? 
// this can pinpoint the problem &  will print out an error straight from mysql
// don't put these in final versions though, make your own error msg else you'll
// be giving away free information about your query structure & db structure 
// to hackers trying SQL inject attacks.
Need to work on an input script, anyone wanna help? I don't know this [censored]! lol`
If you pay me I'll do it. You know my sn.
As will I, but cheaper wink
Ahh [censored] guys, gizzy is having trouble as is with the money on this place.

email me the specs gizmo...
Lol, money, that's funny... :watches months fly out of wallet:
Check your P/M's the frame work is done.
Guess I should have said when Neo, Scallion and I hammered out the front end... lol... I have some code for you to look at later though, I'll email it to you heh...
I would help! But I AM A NINJA!!!!!!!
Still waiting on that email Gizzy...
check your pm's, i'll get it off to you in a sec..
© UGN Security Forum