[+Haze]

The newest version of this tut.
https://hackforums.net/showthread.php?tid=4610630

because the thread is a shitstorm atm.

[Known Alias]

Nice tut bro! I'm totally gonna put time into reading this in a few minutes :)

[Matt AH]

Good tutorial for the beginners just picking up the basics. Easy to read and enjoyable with a powerful concept that can be widely used.

Great job 👍

[+Haze]

Nice tut bro! I'm totally gonna put time into reading this in a few minutes :)

Thanks m8

Good tutorial for the beginners just picking up the basics. Easy to read and enjoyable with a powerful concept that can be widely used.

Great job 👍

Thanks man, means a lot :) Hope some can learn from it.

[Nikey646]

SQL Injection warning, always use Prepared Statements when handling user data of any time.

Example Injection Vuln:

Code

$sql = "Insert Into tblLogin(Username, Password) Values('$user', '$pass');";

If enough people want me to, i can brush up on MySQLi (I learned C# from php, unlike Haze doing php from C#), and show a Prepared Statement example.

P.S Please don't make a tutorial then purposely give highly vulnerable code...Code which isn't 100% secure is fine, but this code can be injected simply by capping

Code

';*SQL Statement Here*--

Otherwise, besides the bad habbits related to the web-side of the code, good tutorial~

[+Haze]

SQL Injection warning, always use Prepared Statements when handling user data of any time.

Example Injection Vuln:

Code

$sql = "Insert Into tblLogin(Username, Password) Values('$user', '$pass');";

If enough people want me to, i can brush up on MySQLi (I learned C# from php, unlike Haze doing php from C#), and show a Prepared Statement example.

P.S Please don't make a tutorial then purposely give highly vulnerable code...Code which isn't 100% secure is fine, but this code can be injected simply by capping

Code

';*SQL Statement Here*--

Yes I'm very much aware of that. I said that in the beginning of the tutorial. I did this mainly for the newbies. For some this can be too much to take it all at once. I tried to keep it simple, and I feared using a prepared statement will only confuse the people trying to learn even more.

In the beginning of the thread I even recommend against using this, as it's just for learning purposes.

Apart from that my PHP is not as strong though, and yes I wouldn't mind you teaching me a thing or two. After I've had some sleep lol

[LynS]

thanks for the tutorial . Really help me out !

[Tedd]

Besides the obvious SQLi vulnerabilities, very good tutorial for starters wanting to use database logins (instead of a fucking MySQL api).

Bookmarked, will definitely link later.

[+Haze]

Thanks for the nice messages to the two people above me. Uhm, I might add a version that is not vulnerable to SQLi injection if the people this thread was aimed at request it.

[Only3]

SQL Injection warning, always use Prepared Statements when handling user data of any time.

Example Injection Vuln:

Code

$sql = "Insert Into tblLogin(Username, Password) Values('$user', '$pass');";

If enough people want me to, i can brush up on MySQLi (I learned C# from php, unlike Haze doing php from C#), and show a Prepared Statement example.

P.S Please don't make a tutorial then purposely give highly vulnerable code...Code which isn't 100% secure is fine, but this code can be injected simply by capping

Code

';*SQL Statement Here*--

Otherwise, besides the bad habbits related to the web-side of the code, good tutorial~

thats why ppl should use pdo over mysql\i

[xNeaples]

Just use PDO, more simple and secure for these things.

[Marwix]

Looks like a really good tutorial, good work +Haze.

Totally worth your night!

[+Haze]

Just use PDO, more simple and secure for these things.

I might add that in but I don't want to be confusing people.

Looks like a really good tutorial, good work +Haze.

Totally worth your night!

Thanks there mate. I guess I can't sleep so I'll just post another tut requested by a member here.

[Rhez]

Thanks for taking the suggestion before :)
I'll gonna bookmark this tutorial . Thanks AGAIN

[RandomUser123]

Thanks for this tut. You know how to structure a thread to make it clear. Even if its not so "secure" as login i may use it for something else..

Thank you for being so willing to help!