Coders please help!

[zardos]

Hi, when i insert this code into member.php the page becomes blank :/ why?

PHP Code:

// Start ROBINSGB
// *************************
 $vbulletin->input->clean_array_gpc('p', array( 
            'gbID' => TYPE_NOHTML 
            'userID' => TYPE_NOHTML 
            'date' => TYPE_NOHTML 
            'message' => TYPE_NOHTML 
            'Submit' => TYPE_NOCLEAN 
            $gbID2  =  $_POST['u'];
        
));   


if (isset($vbulletin->GPC['submit'])) 
{   
    $vbulletin->db->query_write(" 
                    INSERT INTO " . TABLE_PREFIX . "RobinsGB(gbID,uderID,date,message) 
                    VALUES ('$gbID2','".$vbulletin->userinfo['userid']."','" . $vbulletin->GPC['date'] . "','" . $vbulletin->GPC['message'] . "') 
    ");   
    exit;   
}  
// END OF ROBINSGB
// ************************* 


Btw, is there a VB variable for getting the userID or nickname from the profile you are watching?

[Marco van Herwaarden]

PHP Code:

    exit; 


^^^ That is why maybe?

Also that code will very likely lead to SQL-Injection vulnerabilities.

What are you trying to do that you need a code-edit?

[zardos]

Am trying to create a guestbook in member profile page .

[Adrian Schneider]

PHP Code:

 $vbulletin->input->clean_array_gpc('p', array(
    'gbID'    => TYPE_NOHTML,
    'userID'  => TYPE_NOHTML,
    'date'    => TYPE_NOHTML,
    'message' => TYPE_NOHTML,
    'Submit'  => TYPE_NOCLEAN,
    'u'       => TYPE_UINT
));


if ($vbulletin->GPC['submit'])
{
    $vbulletin->db->query_write("
        INSERT INTO " . TABLE_PREFIX . "RobinsGB
            (gbID, userID, `date`, message)
        VALUES (
            '" . $db->escape_string($vbulletin->GPC['gbID']) . "',
             " . $vbulletin->userinfo['userid'] . ",
            '" . $db->escape_string($vbulletin->GPC['date']) . "',
            '" . $db->escape_string($vbulletin->GPC['message']) . "'
        )
    ");
    
    // redirect?
} 


You had various syntax errors, typos, etc. Someone else can look at the various logical errors and see if they can make sense of it.