Qbasicnews.com

http://www.atosoftpp.digitalblackie.com/.../index.php
^that's a forum system I've been working on with zshzn and a guy from irc.

I'm trying to find as many exploits as possible, so i can increase my security. WhiteTiger has already found one, which I corrected.
Feel free to make as many absurd posts as possible.
The top panel isn't 100% functional, but don't worry about that - you can post anyways :rotfl:

Anyways, that's all I have so far

Oz~

I think i managed to break it. Sorry, but you did ask, right?

Updated code....

Again, i want to make this secure

@dilettante: I'm not sure if you did - but if you did...i want to know what you did, so i can block against future attacks using whatever you did

Oz~

Some comments on your coding style. You don't need to export html like this:

print "<div align=\"center\"><table width=\"500\" border=\"1\" cellpadding=\"5\" cellspacing=\"5\">";

You can just put a ?> and then the html, and then commence PHP processing again with <?.

Also you're not using addslashes/stripslashes in all of your database additions from user input. Remember that the user can only cause problems through their interaction with the site, carefully guard the data that they can input.