security seems not a main priority in vb hacks

[sabret00the]

here's a question

is it bad to do

PHP Code:

$variable = addslahes($variable);
$DB_site->query("INSERT INTO table(column)
VALUES ($variable)"); 


[Tekton]

I'm getting into the habit of uni'ing and adding the slashes to anything that isn't intvaled when inserted into the DB with user added stuff.

[Marco van Herwaarden]

Originally Posted by sabret00the

here's a question

is it bad to do

PHP Code:

$variable = addslahes($variable);
$DB_site->query("INSERT INTO table(column)
VALUES ($variable)"); 


That is Ok

[sabret00the]

Originally Posted by MarcoH64

That is Ok

thanks

[MRGTB]

On a lighter note, this thread made me laugh a little!

Because I see many people who have loads of hacks installed. Then when a new version of vBulletin is released they sometimes remove there whole board because of mass hacking which they cannot revert back to upgrade to a new version of vBulletin. Then after doing a clean install of the new vBulletin version to plug possible security issues, they then re-hack there board all over again which could possibly add security issues all over again which they just upgraded to avoid.

Hahaha, Guess there must be method in that madness somewhere! :squareeyed:

[Onimua]

Originally Posted by Gary Bolton

On a lighter note, this thread made me laugh a little!

Because I see many people who have loads of hacks installed. Then when a new version of vBulletin is released they sometimes remove there whole board because of mass hacking which they cannot revert back to upgrade to a new version of vBulletin. Then after doing a clean install of the new vBulletin version to plug possible security issues, they then re-hack there board all over again which could possibly add security issues all over again which they just upgraded to avoid.

Hahaha, Guess there must be method in that madness somewhere! :squareeyed:

That is odd, heh.

I personally only modify files if it's something I feel is worth it (and if it's no more than at least 3 or so files). I also try to avoid plugins and hacks that modify the database as best as possible too.

[Marco van Herwaarden]

Modifying the database would not create a security problem in 99% of the cases. On the other hand 1 code edit (or even 1 plugin) could put your board wide open.

[Onimua]

Originally Posted by MarcoH64

Modifying the database would not create a security problem in 99% of the cases. On the other hand 1 code edit (or even 1 plugin) could put your board wide open.

Avoidance of database changes are more of enabling me to easily upgrade more than anything else. I don't like wondering how anything database-wise would effect me later on. Just a thing of mine.

[Zachariah]

It's simple to me. RTFM
If it don't work uninstall it.

If you know how to fix it. PM / Email the creator how to fix.
Best of all, Backup so you can restore after you mess it up.

It's a NO BRAINER.

[Marco van Herwaarden]

We where talking security i think?