Najaribu ku update taarifa kwenye database inanikatalia

zigi 01

zigi 01

JF-Expert Member
Oct 22, 2017
295
155
Hallo,

Najaribu ku update taarifa kwenye database inanikatalia kila nikijaribu code zinagoma sijajua wapi nimekosea wana IT.
Ila nimejaribu kuingiza I'd manual inakubali ku update hiyo I'd niliyoingiza sasa sijui nini shida.

20210510_202417.jpg
 
yani we jamaa, si utumie framework??, hapa jukwaaani ww ndo unasumbua na matatizo madogo madogo ya php

PHP: 
<?php
session_start();
$_SESSION['messsage'] = '';
$mysqli = new mysqli('localhost', 'root', '', 'alpha');

if ($_SERVER['REQUEST_METHOD'] == 'POST') {

      $pnumber = $mysqli->real_escape_string($_POST['pnumber']);
      $rnumber = $mysqli->real_escape_string($_POST['rnumber']);
      $about = $mysqli->real_escape_string($_POST['about']);
      $id = $_SESSION['id'];

    $avatar_path = $mysqli->real_escape_string('images/avatar/'.$_FILES['avatar']['name']);
    if (preg_match("!image!", $_FILES['avatar']['type'])){
      if (copy($_FILES['avatar']['tmp_name'], $avatar_path)) {


        $sql = "UPDATE users SET
                avatar = '$avatar_path',
                rnumber = '$rnumber',
                pnumber = '$pnumber',
                about = '$about'
                WHERE id = $id ";

                      if ($mysqli->query($sql) === true){
                        $_SESSION['message'] = "Saccessful!" + $fname +"Your Details Updated!";
                        header("location: profile.php");
                      }
                      else {
                        $_SESSION['message'] = "Your profile data did not Uptaded to the database!";
                      }
      }
      else {
        $_SESSION['message'] = "File upload failed!";
      }

    }
    else {
      $_SESSION['message'] = "Please only upload GIF, JPG or PNG images!";
    }
}

 ?>

Hizo hapo juu ni kuupdate

PHP: 
<?php

include 'core/init.php';

//if (session_status() !== PHP_SESSION_ACTIVE) {session_start();}
if(session_id() == '' || !isset($_SESSION)){session_start();}



if(isset($_SESSION["email"])){
    $id = $_SESSION['id'];
    $dataserver = mysqli_query($db, "SELECT * FROM users WHERE id ='$id'");

}else{
    header("location: authentication/login.php");  
}


?>

Hizo hapo zinalimit, User lazima a login ili aweze ku access page yenye izo code hapo juu


PHP: 
<?php
$db = mysqli_connect('127.0.0.1','root','','alpha');
if(mysqli_connect_errno()){
  echo 'Database connection failed with following errors: '. mysqli_connect_error();
  die();
}



?>

Izo hapo juu ni code za init.php, kuna file nimeli include kwenye page ya ku redirect user kwenda kwenye log in akiwa bado aja login


Screenshot (1864).png


Screenshot (1865).png


Screenshot (1866).png


Screenshot (1867).png
Screenshot (1868).png



Screenshot (1869).png


Iyo hapo juu nu kuacess Message
 
Mh, Vulnerable codes, alafu una update vipi image name bila kuimove kwenda kwenye directory husika mkuu si itamiss au sijaona vyema, alafu bind parametor zako, pia haujavalidate code zako yaani uaupdate tu sio?

Ukitaka kusaidiwa vyema basi tupia code kabisa acha mapicha picha
Alafu kama PHP ukiandika hivi maana yake unaendelea kujifunza, na hapa huwezi kimbilia FRAMEWORK kama uko kwa level hii endelea na gurudumu simaanishi kuwa mimi ni mkali ila ndo ukweli
 
mathsjery said:
Mh, Vulnerable codes, alafu una update vipi image name bila kuimove kwenda kwenye directory husika mkuu si itamiss au sijaona vyema, alafu bind parametor zako, pia haujavalidate code zako yaani uaupdate tu sio?

Ukitaka kusaidiwa vyema basi tupia code kabisa acha mapicha picha
Alafu kama PHP ukiandika hivi maana yake unaendelea kujifunza, na hapa huwezi kimbilia FRAMEWORK kama uko kwa level hii endelea na gurudumu simaanishi kuwa mimi ni mkali ila ndo ukweli
Click to expand...
Framework ya php ni ipi wakuu mnisaidie
 
zigi 01 said:
Framework ya php ni ipi wakuu mnisaidie
Click to expand...
Kwa code unazoandika hapo unataka FRAMEWORK ya nini?
Wewe framework bado sana acha uzembe soma php kwanza, kwa ni wazi php security haujasom sasa hii framework utai drive vipi maana utakuwa unabahatisha na sio kuelewa nakushauri jaribu kuunda mfumo amabtovuti yoyote itakayo jumuisha forms, authentication na sessions kadhaa uimalize Kwa PHP pekee, alafu baada ya hapo ndo utajua automatically wapi pa kwenda, nimekuambia weka code zako hapa hutaki unaweka picha?
Hata concept za OOP In PHP nadhani bado hujasoma sasa FRAMEWORK ya nini?

Unazijua namespace, unajua kuibreak app yako kwa kila component zinazojitudia, unafahamu dynamic title za page?, Unafahamu kudeal na .htaccess, robots.txt n.k?

Sio vyote lakini kuna vyauhimu hapo
Nachokuahauri ni wewe kupractice kwanza kwenye php, tumia w3school kama reference soma OOP PALE IJARIBU KWENYE APP YAKO, SOMA AJAX/JQUERY NI SIMPLE.

UKIZINGATIA HAYO ALAFU UKAAMIA KWENYE FRAMEWORK NI RAHISI SANA.

Kuna vitu kama datatable, hivi ni muhimu sana mzee, usipoweza kuunda yako basi ujue kucustomize ile inayouzwa dollar 100 n.k, sasa utaweza je kama unakimbia php.
 
zigi 01 said:
Hapo sawa! Nimekuelewa
Click to expand...

1. pendelea kufanya 'unit testing' usishushe lines nyingi weee ndio utesti, ukicode kidogo una test kama ina meet malengo , inasaidia sana kujua na kutatua tatizo mapema na kwa mda mfupi, hasa kwa 'learner'

2. na alaf pendelea kutumia 'debugger' mathalani 'echo' ( kwa iyo PHP yako hapo juu ) , hasa kwenye izo blocks za 'if statements' , hii itasaidia kujua script ime execute na kufikia wapi, wapi inakwama wapi inaleta error
 
zigi 01 said:
Kama tunakatishana tamaa hivi tutafika kweli?
Click to expand...
Una Advanced knowledge ya PHP?
Sio complete,ile Advanced haswa concept Object Oriented kwenye PHP?
Pia una basic foundation ya JavaScript Frameworks yoyote kama React js na Vuejs

Kama unavyo vyote hivo na umechagua PHP kama backend language yako basi Soma Framework..

Recommended Framework ya PHP kwa sasa ni Laravel...ila current version (8) inakulazimu uwe na hizo criteria nilizoandika hapo juu...

Otherwise focus kwenye PHP
na JavaScript programming kwanza,then utakapokua tayari uhamie kwenye Web programming kwa msaada wa Framework
 
Kuchwizzy said:
Una Advanced knowledge ya PHP?
Sio complete,ile Advanced haswa concept Object Oriented kwenye PHP?
Pia una basic foundation ya JavaScript Frameworks yoyote kama React js na Vuejs

Kama unavyo vyote hivo na umechagua PHP kama backend language yako basi Soma Framework..

Recommended Framework ya PHP kwa sasa ni Laravel...ila current version (8) inakulazimu uwe na hizo criteria nilizoandika hapo juu...

Otherwise focus kwenye PHP
na JavaScript programming kwanza,then utakapokua tayari uhamie kwenye Web programming kwa msaada wa Framework
Click to expand...
Umempa ushauri mzuri, wajuaji wengi wakitaa siku hizi wanakuambia framework ndio kila kitu, sijui achana na kujifunza PHP wewe piga tu Laravel juu kwa juu🙉
 
Cannabis said:
Umempa ushauri mzuri, wajuaji wengi wakitaa siku hizi wanakuambia framework ndio kila kitu, sijui achana na kujifunza PHP wewe piga tu Laravel juu kwa juu🙉
Click to expand...
Hapa maisha yako yote yata depend on what framework can offer,pia hutoweza Ku cultivate full potential ya Framework kwasababu zile core concept huzifahamu

Mfano ili u enjoy Framework kama Laravel,lazima uwe na core knowledge ya "Object Oriented Programming", cause Laravel ni purely object oriented
Pia ni muhimu kufahamu Architectural design pattern inayotumiwa na Framework husika,kwa Laravel ni MVC..sasa kama umekimbilia tu Laravel bila Ku hassle kwenye basic utajua hata maana na faida ya MVC?

At least una basic knowledge ya database before, ujue why kuna mda itakulazimu utumie non relational database na mda gani relational database

Uki skip hizo hatua zote na kwenda moja kwa moja kwenye Framework ni makosa,Frameworks zina tabia ya Ku abstract away hizo concepts zote,

Unakua huwezi Ku control Framework, framework itaku control wewe

Siku tukikutoa nje ya Framework utajiona kilaza,hutoweza Ku implement hata login system yako from the scratch
 
Safi wazee. Nawapata vizuri. Natamani wachangiaji wooote niwape pesa 22,000/= each.
 
You must log in or register to reply here.

Similar Discussions

Back
Top Bottom
Forums
New posts
Post thread
Back