Reply to thread

Message

<blockquote data-quote="Predict" data-source="post: 112358" data-attributes="member: 3953">How could you even have PHP inside the template?!Why you no use the template class to its full potential and you should consider on stop creating more exploits for yourself.&nbsp;When coding in PHP, you should think about how you're going to do it first, well that's how I plan before I code. ;p&nbsp;So, we need a mysql query selecting the person who referred the user, however we don't want to refer that user if the user doesn't exist.&nbsp;[CODE]$query1 = mysql_query(&quot;SELECT username FROM users WHERE username = '&quot; . mysql_real_escape_string($_GET['user']) . &quot;' LIMIT 1&quot;);[/CODE]&nbsp;Now, we want to check if the user exists or not and if it does, we'll proceed.&nbsp;[CODE]if (mysql_num_rows($query1) &gt; 0){echo 'Woo?';}else{echo 'User doesn\'t exist.'}[/CODE]&nbsp;Finished product&nbsp;[CODE]&lt;?phpif (isset($_GET['user'])){$query1 = mysql_query(&quot;SELECT username FROM users WHERE username = '&quot; . mysql_real_escape_string($_GET['user']) . &quot;' LIMIT 1&quot;);&nbsp;if (mysql_num_rows($query1) &gt; 0){echo 'Woo?';}else{echo 'User doesn\'t exist.';}}?&gt;[/CODE]</blockquote>

[QUOTE="Predict, post: 112358, member: 3953"] How could you even have PHP inside the template?! Why you no use the template class to its full potential and you should consider on stop creating more exploits for yourself. When coding in PHP, you should think about how you're going to do it first, well that's how I plan before I code. ;p So, we need a mysql query selecting the person who referred the user, however we don't want to refer that user if the user doesn't exist. [CODE] $query1 = mysql_query("SELECT username FROM users WHERE username = '" . mysql_real_escape_string($_GET['user']) . "' LIMIT 1"); [/CODE] Now, we want to check if the user exists or not and if it does, we'll proceed. [CODE] if (mysql_num_rows($query1) > 0) { echo 'Woo?'; } else { echo 'User doesn\'t exist.' } [/CODE] Finished product [CODE] <?php if (isset($_GET['user'])) { $query1 = mysql_query("SELECT username FROM users WHERE username = '" . mysql_real_escape_string($_GET['user']) . "' LIMIT 1"); if (mysql_num_rows($query1) > 0) { echo 'Woo?'; } else { echo 'User doesn\'t exist.'; } } ?> [/CODE] [/QUOTE]

Verification

Reply to thread

Connect with us

Newest members