php magic

[emineysprince]

<?php

$con=mysql_connect("localhost","root") or die("connection feild");
$db=mysql_select_db("onlinestore",$con) or die("connection feild");
if (isset($_POST['REG']))
{
$fname=$_POST['LN'];
$mname=$_POST['ON'];
$lname=$_POST['ADR'];
$gender=$_POST['PHONE'];
$day=$_POST['Pass'];
$fname1=$_POST['LID'];
$gender1=$_POST['Gender'];
if(empty($_POST['LN']) and empty($_POST['ON']) and empty($_POST['Gender'])and empty($_POST['PHONE']))
{
print"<script language=\"javascript\">alert(\"Fill all the fields\");</script>";
}
elseif(empty($_POST['Pass']))
{
print"<script language=\"javascript\">alert(\"Fill first name please!\");</script>";
}
elseif(empty($_POST['Gender']))
{
print"<script language=\"javascript\">alert(\"Fill Birth year please!\");</script>";
}
elseif(empty($_POST['LID']))
{
print"<script language=\"javascript\">alert(\"Fill your gender please!\");</script>";
}
elseif(empty($_POST['PHONE']))
{
print"<script language=\"javascript\">alert(\"Fill Name please!\");</script>";
}
elseif(empty($_POST['ON']))
{
print"<script language=\"javascript\">alert(\"Fill your last name please!\");</script>";
}
else
{
$query="INSERT INTO `onlinestore`.`reg` (`LastName`,`OtherNames`,`Address`,`Phone`,`Password`,`LogId`,`Gender`)VALUES ('$fname','$mname','$lname','$gender','$day','$fname1','$gender1')";

$result=mysql_query($query);
if($result)
{

print "successefully registration";
}
else
{
print "not saved!";
} }
}

?>

 

[Olaw2jr]

Jamaaaa

 

[magabelab]

<?php

$con=mysql_connect("localhost","root") or die("connection feild");
$db=mysql_select_db("onlinestore",$con) or die("connection feild");
if (isset($_POST['REG']))
{
$fname=$_POST['LN'];
$mname=$_POST['ON'];
$lname=$_POST['ADR'];
$gender=$_POST['PHONE'];
$day=$_POST['Pass'];
$fname1=$_POST['LID'];
$gender1=$_POST['Gender'];
if(empty($_POST['LN']) and empty($_POST['ON']) and empty($_POST['Gender'])and empty($_POST['PHONE']))
{
print"<script language=\"javascript\">alert(\"Fill all the fields\");</script>";
}
elseif(empty($_POST['Pass']))
{
print"<script language=\"javascript\">alert(\"Fill first name please!\");</script>";
}
elseif(empty($_POST['Gender']))
{
print"<script language=\"javascript\">alert(\"Fill Birth

$query="INSERT INTO `onlinestore`.`reg` (`LastName`,`OtherNames`,`Address`,`Phone`,`Password`,`LogId`,`Gender`)VALUES ('$fname','$mname','$lname','$gender','$day','$fname1','$gender1')";

$result=mysql_query($query);

?>

kaka hapa wajanja tutakuhack kwa sql injection na cross site scripting. Inabidi ukague hizo variable zako kabla ya ku call mysql_query($query).

Fanya kama hivi

$query="INSERT INTO `onlinestore`.`reg` (`LastName`,`OtherNames`,`Address`,`Phone`,`Password`,`LogId`,`Gender`)VALUES ("."mysql_real_escape_string('$fname'),"."mysql_real_escape_string('$mname'),"."mysql_real_escape_string('$lname'),"."mysql_real_escape_string('$gender'),"."mysql_real_escape_string('$day'),"."mysql_real_escape_string('$fname1'),"."mysql_real_escape_string('$gender1')";

Warning

This extension was deprecated in PHP 5.5.0, and it was removed in PHP 7.0.0. Instead, the MySQLi or PDO_MySQL extension should be used. See also MySQL: choosing an API guide and related FAQ for more information. Alternatives to this function include:
mysqli_real_escape_string()
PDO::quote()

kuzuia cross site scrpting tumia function kama htmlentities($your_var); pia limit size ya maneno na kufanya checking ndani ya php kama size rule zako zimefuatwa

 

[dafity]

Hio code inatatua tatizo gani la mwanadamu?

 

[magabelab]

Hio code inatatua tatizo gani la mwanadamu?

code kama hiyo ndio inakuwezesha kutangaza injili humu kwenye hii thread ya jamiiforums. Badala ya kuwa kivukoni kigamboni ukipiga injili kwa wapanda kivuko

 

[baldin]

<?php

$con=mysql_connect("localhost","root") or die("connection feild");
$db=mysql_select_db("onlinestore",$con) or die("connection feild");
if (isset($_POST['REG']))
{
$fname=$_POST['LN'];
$mname=$_POST['ON'];
$lname=$_POST['ADR'];
$gender=$_POST['PHONE'];
$day=$_POST['Pass'];
$fname1=$_POST['LID'];
$gender1=$_POST['Gender'];
if(empty($_POST['LN']) and empty($_POST['ON']) and empty($_POST['Gender'])and empty($_POST['PHONE']))
{
print"<script language=\"javascript\">alert(\"Fill all the fields\");</script>";
}
elseif(empty($_POST['Pass']))
{
print"<script language=\"javascript\">alert(\"Fill first name please!\");</script>";
}
elseif(empty($_POST['Gender']))
{
print"<script language=\"javascript\">alert(\"Fill Birth year please!\");</script>";
}
elseif(empty($_POST['LID']))
{
print"<script language=\"javascript\">alert(\"Fill your gender please!\");</script>";
}
elseif(empty($_POST['PHONE']))
{
print"<script language=\"javascript\">alert(\"Fill Name please!\");</script>";
}
elseif(empty($_POST['ON']))
{
print"<script language=\"javascript\">alert(\"Fill your last name please!\");</script>";
}
else
{
$query="INSERT INTO `onlinestore`.`reg` (`LastName`,`OtherNames`,`Address`,`Phone`,`Password`,`LogId`,`Gender`)VALUES ('$fname','$mname','$lname','$gender','$day','$fname1','$gender1')";

$result=mysql_query($query);
if($result)
{

print "successefully registration";
}
else
{
print "not saved!";
} }
}

?>

Connection feild

 

[frankgalos]

Connection feild

lazima iwe failed cos amna password katika connection script

$con = new mysqli("host","user","password","db");
>> Hello word <<<

 

[NullPointer]

Naona ndio umeanza anza, siipendi php kuliko language yoyote ile, mara mia nisome assembly, syntax yake inaniboa.

Ila sasa turudi kwenye code yako, hiyo mistari yoote chini ya hiyo second "if" statement yako ungeweza kuitoa kama ungereplace "and" na kutumia "or". Na hata kama unataka field moja moja there's a better way ya kuandika hiyo code. Ila kwa kua ndio umeanza sio mbaya komaa safari ndefu, siku ukiwa expert utarudi kusoma hiyo code yako hapo utacheka sana.