[Release] Anik's Registration system ( GUI - 04rel004 )

[Mohamed Boubekri]

I find it admirable that you thought of escaping the strings before doing the select query but you should've also escaped the name in the update query. Otherwise, BAD things can happen...

I never Never  Never Never Never Never  Understand Anithingggggggggggggggggggggggggggg

Please @Xmair Give me Example Bro

Imagine you have a command /gotoloc which executes the following query:
"SELECT XYZ FROM Locations WHERE Name = '" + locationName + "'"
where locationName is a string input by the user in the gotoloc command. Imagine there's a bad guy who uses /gotoloc '; DROP TABLE Accounts; instead of a location, this'll get executed:
"SELECT XYZ FROM Locations WHERE Name = ''; DROP TABLE Accounts;"
This'll ultimately execute both of the queries as there is a semicolon right after the SELECT query. To avoid this, you use mysql_escape in mySQL and escapeSQLString in SQLite.
You must be using SQLite so I'm going to put on an example in which can be used by the default SQLite plugin for VCMP.
Instead of:
QuerySQL( database, "SELECT XYZ FROM Locations WHERE Name = '" + locationName + "'" );
Use:
QuerySQL( database, "SELECT XYZ FROM Locations WHERE Name = '" + escapeSQLString( locationName ) + "'" );
Simple, isn't it? I've tried my best to explain it as easy as I could, if you still don't get it, meh.

@Xmair You Are Besstteeee ONe Help Me im Happyyyyyy And im Learned Now.
Thanks for helping my friend

[=RK=MarineForce]

guyz i am add cilent side its error showing

on end

[!]

guyz i am add cilent side its error showing

on end

Why not post the error instead of alerting us.

[=RK=MarineForce]

Luchgox give me script Thankx Goood Lucky Working

[Retard]

@Anik can you give it with whirlpool encryption

[!]

@Anik can you give it with whirlpool encryption

He left vcmp.
http://forum.vc-mp.org/?topic=5382.msg38398#msg38398

[=RK=MarineForce]

Its Working !

link ->

[ForOver]

Its Working !

link ->

nice virus marine
Banned soon

[[KM]Helathien]

I dont know why but I am getting a error " The index Stream does not exist" help pls

[Mohamed Boubekri]

I dont know why but I am getting a error " The index Stream does not exist" help pls

You need to update your server version from rel003 to rel004.