14 replies to this topic

[DarkVision]

See now as a past time watching Abrosia gain me Np i do abit of Web Coding to keep my upto scratch and teach myself PHP

My latest Website Design is by far my favourite and i think the actual background consists of 3-4 different Images (1 in body and Various div's)


http://darkwebs.zapto.org/

If this isnt allowed, i'll happily remove link


Side Note : Site Wont always be online

What ya'll think of it?

Edit: Website removed. In process of creating new. Which will be easier for me to Post my projects on it.

Edited by DarkVision, 04 March 2010 - 03:29 PM.

[Noitidart]

Hm hm i always wanted make something like this in neologs! Its nice bro!

[DarkVision]

Hm hm i always wanted make something like this in neologs! Its nice bro!

Thanks, Means a lot to me =D


The whole design took me a few days to make

But the User system is based on a Script called vSignup which just manages Login's and signup's but i edited most of it.

Other than that, The downloads and such i created myself

[Noitidart]

Wow man how long it take you to learn all that? or did you have previous experience with vSign?

[DarkVision]

Wow man how long it take you to learn all that? or did you have previous experience with vSign?

Well i found vSignup a few years back and just read through all the files to get the hang of whats where

But i've been doing websites since i was about 12-13 (Now being nearly 18) Although im fully self-taught
and i learn through others scripts and stuff i find around.

When i started creating it i had in mind to create it as if i was gonna be releasing it as sort of basic CMS.
To Create a new Page just add a new .php file with what content you want in it and use the link format ?page=(filename)

Even adding links to the menu is in its own seperate file in a list.

The news is just a basic MySQL code i quickly done so the main page wasnt empty.

I think the downloads script is a mix up of the news script and the page system script i created but hey, it works! lol

[Noitidart]

That's really cool! I'm self taught too!

[DarkVision]

That's really cool! I'm self taught too!

It's the best way for me to learn i find.

Like i've been messing with vb6 last few days and just going through countless scripts to find out how to different things

Come out with a small program that logs into neopets, Can check User Money + Till Money and logs it and can save. Little basic but i learn quite a few things from it lol

[Joanna]

Link no worky for me today. *Sad face*

[DarkVision]

Tis up

[James1]

Looking at the front page, the only thing I think it's suffering from is not enough margin/padding around the text, and too many black borders. I'm not a big fan of the really mini layout (it only takes up a fraction of my screen space), but as far as tiny designs go, I think you've done a great job

[DarkVision]

Looking at the front page, the only thing I think it's suffering from is not enough margin/padding around the text, and too many black borders. I'm not a big fan of the really mini layout (it only takes up a fraction of my screen space), but as far as tiny designs go, I think you've done a great job

Thanks, when i go for bigger designs they suck xD


I think that's gonna be what my next design will be though, a full page thing instead of wee lil box in middle

[artificial]

Login is vulnerable to sql injection. Guessing other forms would be as well.

[James1]

Oh yeah. I just had a look myself and it's vulnerable to LFI too. Loads of people make the mistake when learning PHP, so don't worry, it's easy to prevent . You just want to validate the user's input as soon as possible. For example, if it's a number, just use:

$number = (int) $_GET['number'];

That way PHP casts it to an int... so even if it's a string or whatever, it will just evaluate to 0, and won't do anything unexpected. For strings, if it's a range of values (your page names), a good check is:

$page = $_GET['page'];
$valid = array('home', 'downloads', 'faq');
if (!in_array($page, $valid)) {
 die('Page not found');
}

Or, if it's a more complex string for going into the database, use:

$string = mysql_real_escape_string($string);

Hope that helps

Edited by James1, 02 March 2010 - 04:05 PM.

[bigtymerz05]

Looks pretty! good job on your project.

[DarkVision]

Oh yeah. I just had a look myself and it's vulnerable to LFI too. Loads of people make the mistake when learning PHP, so don't worry, it's easy to prevent . You just want to validate the user's input as soon as possible. For example, if it's a number, just use:

$number = (int) $_GET['number'];

That way PHP casts it to an int... so even if it's a string or whatever, it will just evaluate to 0, and won't do anything unexpected. For strings, if it's a range of values (your page names), a good check is:

$page = $_GET['page'];
$valid = array('home', 'downloads', 'faq');
if (!in_array($page, $valid)) {
 die('Page not found');
}

Or, if it's a more complex string for going into the database, use:

$string = mysql_real_escape_string($string);

Hope that helps

Thanks for the advice, The websites rarely on. And not many people know about it as its just a locally hosted project. So i never really bothered with security yet