4 ms·
I made this to get into php and mysql. Constructive Criticism, and suggestions are welcome and appreciated :).
by samjc 14y ago
I made this to get into php and mysql. Constructive Criticism, and suggestions are welcome and appreciated :).
- joshschreuder 14y agoProbably needs a Recaptcha or similar (http://www.google.com/recaptcha http://www.google.com/recaptcha) on the form to slow down those pesky webspammers a bit. Maybe think about nofollowing (http://en.wikipedia.org/wiki/Nofollow http://en.wikipedia.org/wiki/Nofollow) any links in the story too, so you don't get used as SEO juice. My link didn't work out too well either (changed to http://www.sam-the-man.com/yikes/www.google.com http://www.sam-the-man.com/yikes/www.google.com) Also, make sure to filter your user input to avoid XSS attacks. I just posted a story and your page will print HTML and JS verbatim, meaning I could do malicious things. See here: https://www.owasp.org/index.php/Cross-site_Scripting_(XSS) https://www.owasp.org/index.php/Cross-site_Scripting_(XSS) Apart from that, looks pretty good, well done :)
- samjc 14y agoThank you very much. I was hoping that the mysql_real_escape_string() function would be enough, but it did seem too easy. I will definitely look further into it! Thanks again
- joshschreuder 14y agoI'm not a PHP / MySQL guy, but this might help: http://stackoverflow.com/a/110576 http://stackoverflow.com/a/110576