rancheswap
Terminated Account
- Messages
- 223
- Reaction score
- 0
- Points
- 16
Re: Mga Tanong tungkol sa PHP, CSS, jquery, HTML at MySQL pasok D2
im yung, php script lava base script po,
im yung, php script lava base script po,
Most of our features and services are available only to members, so we encourage you to login or register a new account. Registration is free, fast and simple. You only need to provide a valid email. Being a member you'll gain access to all member forums and features, post a message to ask question or provide answer, and share or find resources related to mobile phones, tablets, computers, game consoles, and multimedia.
All that and more, so what are you waiting for, click the register button and join us now! Ito ang website na ginawa ng pinoy para sa pinoy!
like this www.teampinoy.x10.mx see the link, para po magets nyo,
No i want, to add some extra features like level up, here in sb, i have, my existing script here and i got new one, i want to add my exstng scrpt feature to my new one. Script, i want to begg a help. What code should be added to attached the core code to index
my exsting scrpt. Has a lot of feature. And i want to embedd those features in my new scrpt please, help ,
im yung, php script lava base script po,
like this www.teampinoy.x10.mx see the link, para po magets nyo,
sa lahat po ng master sana po bigyan nyo ng pansin ang tanong kong ito.
kung gumamit na po ako ng mysql_real_escape_string pra malabanan ang sql injection
at gumamit din ako ng script_tag para iwasan ang script ng javascript.
meron pa bang way para mahack ang website namin sa status ng security? kasi iniisip ko po baka mahack ang website namin.
sana po matulungan nyo ako lagyan ng more security sa code ko. yan lang po kasi ang alam ko na security,.
need ko lang po talaga malaman pa ang ibang way para maprevent ang hacking
Yong question mo is ma hack pa ba yong SITE ninyou if gumagamit ka lang ng mysql_* blah blah blah...
Hacking don't specify a medium. As long as that medium can be penetrated.
Hacking can be done within your database server; the web server; the OSes;
Database- attacker will use the database accounts and the ports open to connect to the server. Which could wipe out your entire database.
Web server- attacker would overload your web server which could lead to denial of service. Or executes a scripts that is attached to your site that could down your server.
OSes- attacker would get into your file systems and wipe out your entire OS.
Di lang sa code tinitignan yan. Even if you have that securities, you can't handle file uploades which the attacked will be attached.
If you are refering to the apps or php codes, this might be. but there were cases escape can't handle some.
Salamat po sa inyong pagsagot sir.
Question ko po how can they upload a file from you of he needs to be a member? kung example po meron na akong mysql_real... and strip tags sa login page. paano po sila makakapasok sa site pra po makapagupload? kasi ang upload ko po sa site eh nsa loob po ng member?
Paano din po ba sila makakapagattached ng script sa site para po magoverload ang server?
Pasensya na po ang daming tanong. sobrang gusto ko po kasi malagyan ng protection ang site namin.
Di po ibig sabihin yong di members lang ang di mag.hahack. Other will register then once inside they down your site. Mas malaki yong chance if they were members dami kasing makunan ng information if you're inside.
Yong XSS, yan they can attach screen. Or they will create a script that will request sa server mo until you're server can't reply. DoS attack. This is usually done sa mga malalaking sites. They suffer a lot of denial-of-service attacks lalo na yong site mo is di like ng mga attackers.