Coders please help!

[zardos]

Hi, when i insert this code into member.php the page becomes blank :/ why?

// Start ROBINSGB
// *************************
$vbulletin->input->clean_array_gpc('p', array(
'gbID' => TYPE_NOHTML
'userID' => TYPE_NOHTML
'date' => TYPE_NOHTML
'message' => TYPE_NOHTML
'Submit' => TYPE_NOCLEAN
$gbID2 = $_POST['u'];

));


if (isset($vbulletin->GPC['submit']))
{
$vbulletin->db->query_write("
INSERT INTO " . TABLE_PREFIX . "RobinsGB(gbID,uderID,date,message)
VALUES ('$gbID2','".$vbulletin->userinfo['userid']."','" . $vbulletin->GPC['date'] . "','" . $vbulletin->GPC['message'] . "')
");
exit;
}
// END OF ROBINSGB
// *************************

Btw, is there a VB variable for getting the userID or nickname from the profile you are watching?

[Marco van Herwaarden]

exit;
^^^ That is why maybe?

Also that code will very likely lead to SQL-Injection vulnerabilities.

What are you trying to do that you need a code-edit?

[zardos]

Am trying to create a guestbook in member profile page .

[Adrian Schneider]

$vbulletin->input->clean_array_gpc('p', array(
'gbID' => TYPE_NOHTML,
'userID' => TYPE_NOHTML,
'date' => TYPE_NOHTML,
'message' => TYPE_NOHTML,
'Submit' => TYPE_NOCLEAN,
'u' => TYPE_UINT
));


if ($vbulletin->GPC['submit'])
{
$vbulletin->db->query_write("
INSERT INTO " . TABLE_PREFIX . "RobinsGB
(gbID, userID, `date`, message)
VALUES (
'" . $db->escape_string($vbulletin->GPC['gbID']) . "',
" . $vbulletin->userinfo['userid'] . ",
'" . $db->escape_string($vbulletin->GPC['date']) . "',
'" . $db->escape_string($vbulletin->GPC['message']) . "'
)
");

// redirect?
}You had various syntax errors, typos, etc. Someone else can look at the various logical errors and see if they can make sense of it.