• Log InLog In
  • Register
Liquid`
Team Liquid Liquipedia
EDT 19:37
CET 00:37
KST 08:37
  • Home
  • Forum
  • Calendar
  • Streams
  • Liquipedia
  • Features
  • Store
  • EPT
  • TL+
  • StarCraft 2
  • Brood War
  • Smash
  • Heroes
  • Counter-Strike
  • Overwatch
  • Liquibet
  • Fantasy StarCraft
  • TLPD
  • StarCraft 2
  • Brood War
  • Blogs
Forum Sidebar
Events/Features
News
Featured News
[ASL22] Finals Preview: Sweet Victory!12[ASL22] Ro4 Preview: Mirror Mirror6[ASL22] Ro8 Preview: Within Reach5[ASL22] Ro8 Preview: In A Tizzy11[ASL22] Ro16 Preview: Holy Diver5
Community News
Weekly Cups (October 19-25): Clem triples first in 5.0.173Evil Geniuses - shutting down19ISSL (IntoTheTV x SOOP SC2 League): Premier5Weekly Cups (October 12-18): 5.0.17 era begins1[$1250] International ShieldBattery League91
StarCraft 2
General
Evil Geniuses - shutting down Weekly Cups (October 19-25): Clem triples first in 5.0.17 REPORT: StarCraft 2: Remastered In Development No more SC2 streamers on team liquid? How do you feel about the mass reverts in the 5.0.17 PTR?
Tourneys
2026 KungFu Cup Announcement RSL goes to London! 2026 Offline Finals Nov 21-22 ScienceCraft (October 24-25) - Live Event Sparkling Tuna Cup - Weekly Open Tournament ISSL (IntoTheTV x SOOP SC2 League): Premier
Strategy
[H] ZvP Mid-Late Game: Stalkers Collossi HT
Custom Maps
Simple Questions/Answers [G] How to playtest arcade maps [A] Nemrods 1/4 players
External Content
Mutation # 549 Endless Sparkles The PondCast: SC2 News & Results Mutation # 548 Shining Bright Mutation # 547 Temple Of Terror
Brood War
General
Starcraft player cRuZa Passed away. SCHNAIL now supports Remastered BW General Discussion [BW] Looking for Clan Thread! [ASL22] Finals Preview: Sweet Victory!
Tourneys
[$1250] International ShieldBattery League [Megathread] Daily Proleagues KCM Race Survival 2026 Season 4 [BSL23] RO24 Group D - Sunday 21:00 CET
Strategy
50,000-Word Terran Builds Memo 2026-10-22 Cliff Jump Revisited (1 in a 1000 strategy) Simple Questions, Simple Answers
Other Games
General Games
Nintendo Switch Thread Stormgate/Frost Giant Megathread Mobile Legends: Bang Bang Armies of Exigo - YesYes? General RTS Discussion Thread
Dota 2
Dota 2 Champions League Season 3 Begins April 25!
League of Legends
[TL LoL EUW IHs] Teemo shall perish
Heroes of the Storm
Heroes of the Storm 2.0
Hearthstone
Deck construction bug
TL Mafia
TL Mafia Community Thread
Community
General
The Chess Thread Things Aren’t Peaceful in Palestine European Politico-economics QA Mega-thread US Politics Mega-thread Russo-Ukrainian War Thread
Fan Clubs
Reynor Fan Club The Flash Fan Club Serral Fan Club
Media & Entertainment
Anime Discussion Thread Movie Discussion! [Manga] One Piece
Sports
Football (Soccer) Thread TeamLiquid Health and Fitness Initiative For 2023 MLB/Baseball 2023
World Cup 2022
Tech Support
Computer Build, Upgrade & Buying Resource Thread
TL Community
Recent Gifted Posts
Blogs
Innovate or Game Over?
TrAiDoS
ShieldBattery on Mac
Kraekkling
[ASL22] Ro4 Day1 Ticket Giv…
bITt.mAN
Can Bots Beat Pros?? Starcr…
namkraft
Customize Sidebar...

Website Feedback

Closed Threads



Active: 10822 users

[P, SC] Beta-testers needed AGAIN - Page 2

Blogs > Taiche
Post a Reply
Prev 1 2 All
yenta
Profile Blog Joined April 2006
Poland1143 Posts
May 14 2008 00:07 GMT
#21
I will help - it'll be fun to see if i can pull some xss off
Trutacz Practice Discord - https://discord.gg/PWF7Pv
Taiche *
Profile Blog Joined December 2004
France1963 Posts
May 14 2008 09:00 GMT
#22
Yeah thanks, it's something I need a lot as well
Manifesto7 Uses ReXplorer, and so should you! : http://repasm.net/rx/
anotak
Profile Blog Joined March 2008
United States1537 Posts
May 15 2008 11:14 GMT
#23
I'm down for this, I know a bit about cross site scripting and a tiny bit about SQL Injection. Also, the more generic logic holes are fun to find as well.
Taiche *
Profile Blog Joined December 2004
France1963 Posts
May 15 2008 15:54 GMT
#24
Cool, thanks
Manifesto7 Uses ReXplorer, and so should you! : http://repasm.net/rx/
MasterOfChaos
Profile Blog Joined April 2007
Germany2896 Posts
May 15 2008 16:44 GMT
#25
Using formatstring based queryfunctions like the following reduces the the risk of SQL-Injection significantly. We also log all query errors to the database on the live system, which allows fast detection of such errors. (You can also opt for email). I removed some project specific parts and the parts not written by myself.
+ Show Spoiler +
function query()
{
$args = func_get_args();
$args_count=func_num_args();
if ($args_count==0){die('Query needs at least one parameter');};
if ($args_count>1)
{
for ($i=1;$i<$args_count;$i++)
{
if (get_magic_quotes_gpc())
$args[$i]=stripslashes($args[$i]);
$args[$i]=mysql_real_escape_string($args[$i]);
}
$qry=call_user_func_array('sprintf', $args);
}
else $qry=&$args[0];
$res=@mysql_query($qry);
if ($res===false)
{
collect additional info about the site like POST and GET Data
if (($_SERVER['REMOTE_ADDR']=='127.0.0.1')or(Is User an Admin?))
{
echo('<div class="sql_error">Mysqlerror:<br><pre>'.htmlentities($qry).'</pre><br>'.htmlentities(mysql_error()).'</div>');
}
else
{
Log query to database here
die('SQL-Error');
}
}
return $res;
}

Usage:
$res=query("select * from table where name='%s'",$nick);
$res=query("select * from table where id=%d",$id);
LiquipediaOne eye to kill. Two eyes to live.
Taiche *
Profile Blog Joined December 2004
France1963 Posts
May 15 2008 18:24 GMT
#26
Yeah thanks, but I already have classes doing all that ;p Actually, I think I have rewritten some sort of ORM without knowing it. Should have reused one instead... bah.
Manifesto7 Uses ReXplorer, and so should you! : http://repasm.net/rx/
yenta
Profile Blog Joined April 2006
Poland1143 Posts
May 15 2008 19:30 GMT
#27
why not just use a framework that does all of that for you
Trutacz Practice Discord - https://discord.gg/PWF7Pv
Prev 1 2 All
Please log in or register to reply.
Live Events Refresh
OSC
08:00
OSC Elite Rising Star #21
CranKy Ducklings42
Liquipedia
[ Submit Event ]
Live Streams
Refresh
StarCraft 2
ViBE106
SpeCial 29
StarCraft: Brood War
Artosis 566
ProTech196
Leta 75
Dota 2
syndereN435
NeuroSwarm157
League of Legends
Doublelift1012
JimRising 724
Counter-Strike
Fnx 1192
Super Smash Bros
hungrybox595
AZ_Axe96
Heroes of the Storm
Grubby2856
Trikslyr93
Other Games
summit1g8468
C9.Mang0218
ToD215
PiGStarcraft191
Liquid`Hasu134
Organizations
Other Games
gamesdonequick777
[ Show 15 non-featured ]
StarCraft 2
• Hupsaiya 79
• musti20045 29
• CranKy Ducklings SOOP6
• AfreecaTV YouTube
• intothetv
• Kozan
• IndyKCrew
• Migwel
StarCraft: Brood War
• BSLYoutube
• STPLYoutube
• ZZZeroYoutube
League of Legends
• Nemesis3166
• Jankos2666
• Scarra1018
Other Games
• imaqtpie677
Upcoming Events
KCM Race Survival
10h 24m
IntoTheTV X SOOP
11h 24m
SHIN vs GuMiho
Clem vs Classic
OSC
22h 24m
WardiTV Invitational
1d 12h
GSL
1d 12h
Epic.LAN
1d 13h
Replay Cast
1d 23h
Sparkling Tuna Cup
2 days
Epic.LAN
2 days
AI Arena Tournament
2 days
[ Show More ]
Yamato Cup
3 days
Map Test Tournament
3 days
WardiTV Weekly
4 days
Replay Cast
4 days
Rogue vs Classic
Patches Events
5 days
PiGosaur Cup
6 days
Kung Fu Cup
6 days
Liquipedia Results

Completed

Proleague 2026-10-27
Blizzard Classic Cup 2026
HCC Season 3

Ongoing

Acropolis #5
KCM Race Survival 2026 Season 4
International ShieldBattery League
BSL Season 23
PGL Masters Bucharest 2026
Stake Ranked Episode 5
1win Private Club #2
Thunderpick World Champ. '26
ESL Pro League Season 24
Stake Ranked Episode 4
1win Private Club #1
Logitech G Play Connect 2026
SL StarSeries Fall 2026
FISSURE Playground #3
BLAST Open Fall 2026
Esports World Cup 2026

Upcoming

IPSL Winter 2026-27
SC4ALL II: Brood War
BSL 23: Non-Korean Championship
HSC XXX
Stellar Fest 2: Lunar Cup
SC4ALL II: StarCraft II
Kung Fu Cup 2026 Grand Finals
RSL Offline Finals
eXTREMESLAND 2026
PGL Major Singapore 2026
Stake Ranked Episode 6
BLAST Rivals Fall 2026
IEM Beijing 2026
TLPD

1. ByuN
2. TY
3. Dark
4. Solar
5. Stats
6. Nerchio
7. sOs
8. soO
9. INnoVation
10. Elazer
1. Rain
2. Flash
3. EffOrt
4. Last
5. Bisu
6. Soulkey
7. Mini
8. Sharp
Sidebar Settings...

Advertising | Privacy Policy | Terms Of Use | Contact Us

Original banner artwork: Jim Warren
The contents of this webpage are copyright © 2026 TLnet. All Rights Reserved.