WordPress, Shopify ir PHPFusion programuotojų bendruomenė

Parašė Eitvis· 2008 Gru. 7 17:12:35
#12
Sveiki. kaip toi apsaugoi nuo kenksmingo PHP kodo suredaguot panele ?
pavyzdziui tokią


$date = strtotime(date("Y-m-d", time()));

$snd = $date;

$ryt =  $date+(60*60*24);



$data = mysql_query("SELECT * FROM `nba4u2_games` WHERE `ga_date` >= $snd AND `ga_date` < $ryt") or die(mysql_error());

while ($a = mysql_fetch_array($data))

{

$gm[] .= $a['ga_id'];

}

$ef = mysql_query("SELECT st_fgm, st_te_id, st_fgp, st_fga, st_pts, st_rebs, st_ast, st_blk, st_stl, st_mins, st_to, (st_pts+st_rebs+st_ast+st_stl+st_blk) - ((st_fga-st_fgm + st_fta-st_ftm) + st_to) as eff, st_pl_id FROM `nba4u2_gamestats` WHERE st_ga_id IN (" . implode(', ', $gm) . ") ORDER BY `eff` DESC LIMIT 1");



while ($q = mysql_fetch_array($ef))

{

$eff = $q['eff'];

$plids = $q['st_pl_id'];

$team = $q['st_te_id'];

$pts = $q['st_pts'];

$rebs = $q['st_rebs'];

$ast = $q['st_ast'];

$stl = $q['st_stl'];

$blk = $q['st_blk'];

$to = $q['st_to'];

$min = $q['st_mins'];

}



$koma = mysql_query("SELECT * FROM `nba4u2_teams` WHERE `te_id` = '$team'") or die(mysql_error());

while ($b = mysql_fetch_array($koma))

{

$teamas = $b['te_name'];

$miestas =$b['te_city'];

$pav = $b['te_abbrev'];

}

$vards = mysql_query("SELECT * FROM `nba4u2_players` WHERE `pl_id` = '$plids'") or die(mysql_error());

while ($w = mysql_fetch_array($vards))

{

$names = $w['pl_fname'];

$namexs = $w['pl_name'];



$fots = strtolower($names);

$fots1 = "_";

$fots2 = strtolower($namexs);

$image = "$fots$fots1$fots2";

}

if ($eff) {

echo "<div align=\"center\"><img border=\"1\" width=\"150\" height=\"134\" src=\"http://www.nba-nation.lt/img/players/small/act_$image.jpg\" alt=\"img\"/><br>

</div>

<center><b>$names $namexs [$pav]</b></center>

<br>

<div align=\"left\">

<b>Statistika:</b><br>

Efektyvumas: <b>$eff</b><br>

Pelnyti taskai: <b>$pts</b><br>

Atkovoti kamuoliai: <b>$rebs</b><br>

Rez. perdavimai: <b>$ast</b><br>

Perimti kamuoliai: <b>$stl</b><br>

Blokuoti metimai: <b>$blk</b><br>

Suklysta: <b>$to</b><br>

Minutes: <b>$min</b></div><br>";

?>

</center>

</b>



<?

} else {

     echo"<center><b><h3>Šiandien rungtyniu nebuvo.</h3></b></center>";