Menu

A Little Securoty Fix (+)

2001-06-05
2012-09-14
  • Alexei Shalin

    Alexei Shalin - 2001-06-05

    Here little secuirty fix :) Disc. It's fix for this : If you remember i told that any one can send any message from any one and can send message anonymously .. Hope i fix it :

    ]FIX:
    just add it in handle_inputH.php3
    in function addmessage

    it's better put it after globals
    ----cut here----
    include("./lib/get_IP.lib.php3");                    
                                                         
    $getn=mysql_query ("SELECT username from ".C_USR_TBL."");
    while ($row=mysql_fetch_array ($getn))               
    {                                                    
    $n=$row ["username"];                                 
    if ($n!=$U) {$chk=TRUE;} else {$chk=FALSE; break;}   
    }                                                    
    $U=ereg_replace (" ","",$U);                         
    if ($chk==TRUE) {$M=""; exit;}                       
    if ($U=="") {exit;}                                  
    $getIP=mysql_query ("SELECT ip from ".C_USR_TBL." where username='$U'");
    $row=mysql_fetch_array ($getIP);
    $ip_u=$row["ip"];
    if ($ip_u!=$IP) {exit;}
    ----cut here--------

     
    • Loïc Chapeaux

      Loïc Chapeaux - 2001-06-06

      Hi Alexei!

      Do you recieved the mail I sent you this morning?

      Regards,
      Loc

       

Log in to post a comment.

Want the latest updates on software, tech news, and AI?
Get latest updates about software, tech news, and AI from SourceForge directly in your inbox once a month.