You arent supposed to put the values for the ID in the database if its auto incremented. Simply remove the `id` and '' inside the query.
EDIT:
Like so:
mysql_query("INSERT INTO `chat` (`username` ,`message`,`time`,`ip`) VALUES ('$username','$comment', '$time', '$realip')"); // enters into chat...
Well, @Wess you asked and I decided to code it. Could use some changes etc, just gonna post it for now.
index.php
// Require app autoload
require_once __DIR__ . '/app/autoload_namespace.php';
$class = new Syberia\Autoload([
Syberia\Http\Request::class,
Syberia\Controller\Home::class...
Bronson you even know the true story about Eminems rap career? Obviously not. Never stated he was bad, you're just too naive to be capable of reading what I write. His lyrics are just shite compared to those artists. Example http://genius.com/amp/Vinnie-paz-end-of-days-lyrics
I'd not recommend using MyBB, well they're decent but they got an insecure file uploader which can easily be exploited and by that upload a php shell through it.
Sent from my SM-G928F using Tapatalk
I've seen the Steam Greenlight trailer, and well, the concept is great, but vampire fucking looking characters with wings? wtf
Some things could use a big improvement, e.g the player info box that gets shown above the players heads.
1. Jays reply wasn't even a correct way to verify password hashes with the built-in functions, as I've mentioned several times, but you clearly didn't bother to read before commenting.
2. Nope, it isn't, not if you apply a salt, as is recommended, and is a default by crypt, base64. mcrypt...
Definitely not the password verifying thats wrong with, I can tell you that.
EDIT:
All I can suggest, is getting a new cms that isnt deprecated as fuck.
It's fine, I recoded RevCMS to PDO a year ago, which included bcrypt as password hashing. You're just doing it wrong.
Could you post an example of the hash in the password column inside the users table?
If its not something like this $2y$12$, in the start then you're definitely doing it wrong.
Just change your userValidation function to this.
final public function userValidation($username, $password)
{
$query = mysql_query("SELECT `password`FROM `users` WHERE `username` = '".mysql_real_escape_string($username)."' LIMIT 1");
$dbpass = mysql_result($query, 0)...
Drop me your userValidation function, because I can see the error.
Are you using password_verify() or are you just simply checking the two hashes against eachother? Because you're pretty much hashing the entered password on this line:
if($this->userValidation($template->form->log_username...
Dunno how the heck your login function works, this was an example on how passwords are verified. Don't expect me to write a whole script for you, because then you'll never truly understand it, before you do it yourself. Never used RevCMS in production, and would never bother to do so.
EDIT...
What the hell kind of password validation is that lmfao. First query line, select password from users where username is post password? Wtf.
Either way, this wouldn't work, since you're not verifying the posted password, you're just hashing the input and checking it against the one in the...