Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

.NET 

VB.NET Login & Registration System PHP SQL [Semi beginner]

Nice tut bro! I'm totally gonna put time into reading this in a few minutes :)
(Dec 30, 2014 01:41 AM)Nikey646 Wrote:  SQL Injection warning, always use Prepared Statements when handling user data of any time.

Example Injection Vuln:
Code
$sql = "Insert Into tblLogin(Username, Password) Values('$user', '$pass');";

If enough people want me to, i can brush up on MySQLi (I learned C# from php, unlike Haze doing php from C#), and show a Prepared Statement example.

P.S Please don't make a tutorial then purposely give highly vulnerable code...Code which isn't 100% secure is fine, but this code can be injected simply by capping
Code
';*SQL Statement Here*--

Otherwise, besides the bad habbits related to the web-side of the code, good tutorial~

thats why ppl should use pdo over mysql\i
"Makes a connection to the phpMyAdmin"

So the database you are using is a PhpMyAdmin database? Always thought PhpMyAdmin was just a editor.


Apart from the SQLi issue, this can also be cracked easier then Proton rat, just use a proxy server or even using the hosts file.

This is a okay tutorial, but I would not recommend using this, a beginner at cracking could crack this so easy also the database could be dumped with SQLi and you will leak everybodys usernames and passwords, and the passwords are in plain text so if the DB was dumped, you are rekt and e-rekt.

Second, you should also have a ID column in the DB, you should always have one.


You can also create accounts with the same username.
(Dec 30, 2014 08:53 AM)+Haze Wrote:  I know, I did that for simplicity, in real practice, I would of used another column called ID which would be our primary key which would also be an auto increment number. Or make the username the primary key..

I don't know if you know how to read but I clearly advised against using this, just used this as a concept.

And finally, I did this whole tut over night with no school, my thinking was iffy.

So why did you make a low quality tutorial? Thought you was high quality man?
(Dec 30, 2014 09:06 AM)+Haze Wrote:  and so far your the only one that thinks its LQ. But then again we both know how socially incompetent you are.

So you make a low quality tutorial for what? Rep? That perfetic.
If you are going to make a tutorial, atleast make a good HQ one. This is worse then what Only3 could do.
(Dec 30, 2014 09:16 AM)+Haze Wrote:  if you go
https://hackforums.net/showthread.php?tid=4609552
you'll see a user requested that I made one.

🤝

"If you are going to make a tutorial, atleast make a good HQ one. This is worse then what Only3 could do."
(Dec 30, 2014 09:18 AM)Cornflower Blue இڿڰۣ-ڰۣ— Wrote:  "If you are going to make a tutorial, atleast make a good HQ one. This is worse then what Only3 could do."

😁 i didnt made any tut ever 😏
(Dec 30, 2014 09:49 AM)Only3 Wrote:  😁 i didnt made any tut ever 😏

That was the joke, this is worse then doing nothing, get it?
(Dec 30, 2014 09:54 AM)Cornflower Blue இڿڰۣ-ڰۣ— Wrote:  That was the joke, this is worse then doing nothing, get it?

😁 yhe but i want u to write it 🤣
just use pdo or escape the string whats all about if some one going to c&p this example as login register system then he stupid
Thanks, very good work i will try this. 🤝


Possibly Related Threads...
Thread / Author Replies Views Last Post
[C] by MeterpreterJun 27, 2018 02:10 AM 0 188 Jun 27, 2018 02:10 AM
Last Post: Meterpreter
[Python] by Mate.Apr 4, 2018 05:27 AM 1 179 Apr 4, 2018 05:27 AM
Last Post: ChInfoOrg
[.NET] by fickNov 21, 2017 08:13 AM 32 1,030 Nov 21, 2017 08:13 AM
Last Post: fick