[WTH] Gaming Script Needs Securing [205 PHP Files]

Discussion in 'Programming' started by JoRd, Nov 12, 2007.

  1. #1
    Im looking to hire a coder who can secure one of my gaming scripts from things like SQL injections and other ways of interfering with the games database

    There are 205 PHP files all together in this script

    An short example of some of the files are as follow:

    <?php
    
    include "globals.php";
    
    $_GET['u'] = abs((int) $_GET['u']);
    
    if(!$_GET['u'])
    
    {
    
    print "Invalid use of file";
    
    }
    
    else
    
    {
    
    $q=$db->query("SELECT u.*,us.*,c.*,h.*,g.*,f.* FROM users u LEFT JOIN userstats us ON u.userid=us.userid LEFT JOIN cities c ON u.location=c.cityid LEFT JOIN houses h ON u.maxwill=h.hWILL LEFT JOIN gangs g ON g.gangID=u.gang LEFT JOIN fedjail f ON f.fed_userid=u.userid WHERE u.userid={$_GET['u']}");
    
    if($db->num_rows($q) == 0)
    
    {
    
    print "Sorry, we could not find a user with that ID, check your source.";
    
    }
    
    else
    
    {
    
    $r=$db->fetch_row($q);
    
    if($r['user_level'] == 1) { mafiacol="Member"; } else if($r['user_level'] == 2) { $userl="Admin"; } else if ($r['user_level'] == 3) { $userl="Secretary"; } else if($r['user_level'] == 0) { $userl="NPC"; }  else {$userl="Assistant"; }
    
    $lon=($r['laston'] > 0) ?date('F j, Y g:i:s a',$r['laston']) : "Never";
    
    $sup=date('F j, Y g:i:s a',$r['signedup']);
    
    $ts=$r['strength']+$r['agility']+$r['guard']+$r['labour']+$r['IQ'];
    
    $d="";
    
    if($r['laston'] > 0)
    
    {
    Code (markup):
    Please could you let me know if you'd be interested in this job and let me know the price you'd be charging and the rough time of completion you could do this in.

    Thanks

    Jordan
     
    JoRd, Nov 12, 2007 IP
  2. Sakibanda

    Sakibanda Banned

    Messages:
    90
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    0
    As Seller:
    100% - 0
    As Buyer:
    100% - 0
    #2
    Hello Sir,

    I am wondering why no one are ready yet to do this for you. but any how i can do this work. please check pm for more details on the things i can do.
     
    Sakibanda, Nov 12, 2007 IP
  3. scriptmachine

    scriptmachine Banned

    Messages:
    473
    Likes Received:
    10
    Best Answers:
    0
    Trophy Points:
    0
    As Seller:
    100% - 0
    As Buyer:
    100% - 0
    #3
    Check your pm box
     
    scriptmachine, Nov 12, 2007 IP