Security

[select94]

Hi every one. I'am trying to start tracker, but I can't find security mods for TBDEV 08...

The source is: http://www.bvlist.com/downloads/9106-best-torrents.html please help me to secure it.

Thank you.

[firefly007]

Originally Posted by select94

Hi every one. I'am trying to start tracker, but I can't find security mods for TBDEV 08...

The source is: http://www.bvlist.com/downloads/9106-best-torrents.html please help me to secure it.

Thank you.

What do you mean by security?

[select94]

Security .. close the holes so the hackers can not hack the tracker!

[firefly007]

Originally Posted by select94

Security .. close the holes so the hackers can not hack the tracker!

Well first setup a white list for your staff where by if someone happens to promote him or her self to staff and isn't in the white list they will be banned.

2)Sanitze all you $_POST and $_GET

function sanitize($data) {
 
    $data = trim($data);
    if(get_magic_quotes_gpc())
        $data = stripslashes($data);
    if(is_numeric($data) && preg_match('/\./', $data))
        $data = floatval($data);
    elseif(is_numeric($data))
        $data = intval($data);
    else
        $data = mysql_real_escape_string($data);
 
    return $data;
}

Usage

$username = sanitize($_POST["username");

3) If you are not comfortable with coding, then rather choose a secure source code.

[select94]

Thank you very mutch..i will sanitize them and that's all , or there have another security mods?

P.S. Can I use the maxsysop function instead that white list?

Bump:

Originally Posted by select94

Thank you very mutch..i will sanitize them and that's all , or there have another security mods?

P.S. Can I use the maxsysop function instead that white list?

Please help.

// Sorry for my bad english. //