vb.org Archive - Coders please help!

vb.org Archive (https://vborg.vbsupport.ru/index.php)

- vB3 Programming Discussions (https://vborg.vbsupport.ru/forumdisplay.php?f=15)

- - Coders please help! (https://vborg.vbsupport.ru/showthread.php?t=145104)

zardos

04-17-2007 04:25 PM

Coders please help!

Hi, when i insert this code into member.php the page becomes blank :/ why?

PHP Code:


		
			
// Start ROBINSGB

// *************************

 $vbulletin->input->clean_array_gpc('p', array( 

            'gbID' => TYPE_NOHTML 

            'userID' => TYPE_NOHTML 

            'date' => TYPE_NOHTML 

            'message' => TYPE_NOHTML 

            'Submit' => TYPE_NOCLEAN 

            $gbID2  =  $_POST['u'];

        

));   





if (isset($vbulletin->GPC['submit'])) 

{   

    $vbulletin->db->query_write(" 

                    INSERT INTO " . TABLE_PREFIX . "RobinsGB(gbID,uderID,date,message) 

                    VALUES ('$gbID2','".$vbulletin->userinfo['userid']."','" . $vbulletin->GPC['date'] . "','" . $vbulletin->GPC['message'] . "') 

    ");   

    exit;   

}  

// END OF ROBINSGB

// *************************

Btw, is there a VB variable for getting the userID or nickname from the profile you are watching?

Marco van Herwaarden

04-17-2007 05:57 PM

PHP Code:


		
			
    exit;

^^^ That is why maybe?

Also that code will very likely lead to SQL-Injection vulnerabilities.

What are you trying to do that you need a code-edit?

zardos

04-17-2007 06:16 PM

Am trying to create a guestbook in member profile page .

Adrian Schneider

04-17-2007 06:36 PM

PHP Code:


		
			
 $vbulletin->input->clean_array_gpc('p', array(
    'gbID'    => TYPE_NOHTML,
    'userID'  => TYPE_NOHTML,
    'date'    => TYPE_NOHTML,
    'message' => TYPE_NOHTML,
    'Submit'  => TYPE_NOCLEAN,
    'u'       => TYPE_UINT
));


if ($vbulletin->GPC['submit'])
{
    $vbulletin->db->query_write("
        INSERT INTO " . TABLE_PREFIX . "RobinsGB
            (gbID, userID, `date`, message)
        VALUES (
            '" . $db->escape_string($vbulletin->GPC['gbID']) . "',
             " . $vbulletin->userinfo['userid'] . ",
            '" . $db->escape_string($vbulletin->GPC['date']) . "',
            '" . $db->escape_string($vbulletin->GPC['message']) . "'
        )
    ");
    
    // redirect?
}

You had various syntax errors, typos, etc. Someone else can look at the various logical errors and see if they can make sense of it.

All times are GMT. The time now is 08:31 AM.

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.01080 seconds Memory Usage 1,733KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (3)bbcode_php_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)post_thanks_navbar_search (1)printthread (4)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: