Btw one anti-hacking tip which is really important to know:
Users are able to execute MySQL queries if you do not escape posted data. E.g. if you have the folowing query:
Code:
"SELECT * FROM `table` WHERE `field`='{$postedinfo_x}' LIMIT 1"
Then a user could alter the code by submitting the folowing text:
Resulting in a return of all data. But also more harmfull queries could be performed like DROP TABLE or DROP DATABASE etc.
To protect against this, simply use the PHP function addslashes():
Code:
"SELECT * FROM `table` WHERE `field`='".addslashes($postedinfo_x)."' LIMIT 1"
Best Regards,
Jan Jaap