PHP Tutorial - 32 - Email Confirmation for PHP Game

[B1KMusic]

1:22 connect.oho

[123456789robbie]

your code is vunerable to sql injection attacks. just sayin.

[manasume]

where did that passkey came from?

[JKTCGMV13]

*Looks through 80 lines of code*

*1/2 hour later*

"OH! I put 'pass' not 'password'!"

[dandymcgee]

First off, great beginner tutorial. You're really good at explaining tough concepts.

To anyone watching, just keep in mind what could happen if a user browses to:

?passkey=whocares'; DROP TABLE temp; --

ALL user input should be sanitized on arrival, and especially before performing a SQL query.

[moufpuncha]

@dandymcgee yeah but wouldn't you have to know the name of the table or database?

[dandymcgee]

@moufpuncha How hard is that to guess though? Far more often than not I come across tables named "Customers", "Employees", "Payroll". Don't every rely on security through obscurity, I know a hundred people who will tell you a false sense of security is better than no security because it's easier to forget about it.

[SCARHExtendedMags]

@dandymcgee You could name the temp table someting stupidly long, then it would be unlikely to guess.

[dandymcgee]

@SCARHExtendedMags Or you could name it something useful and sanitize the input, eliminating the risk altogether.

[LordOfCa]

$sql -> Lame query...

True query should be: INSERT INTO temp (code,username) values ('$confirm_code','$name')

[5kYz3r]

does anybody has the complete code from tutorials 30/31 ?

i couldnt download it :/

thanks ;)

[6183134]

Excelente!! Todos los tutoriales han sido excelentes!!!

[Acebeats1]

I have a legal list of email recipients (approximately 5000+) from my musicbusiness. I need to send out bulk email messages with one click of a button and would like to do this in php.

Do you know of any bulk email sending php scripts?

Thanks!

[phi11ykid96]

@Acebeats1 you probably could load them into a database in MySQL then just send email an email to that database if you know what i mean

[Hadyy13]

goldensunsilvermoon, there is no $end in registernext.php. I spent a long time looking at that file to make sure it was ok, it must be your own mistake.

[goldensunsilvermoon]

unexpected $end in /registernext.php on line 71

Someone have an idea? After all 35 lessons for now, I try to make a registration. But in his code there is a mistake. :/

[goldensunsilvermoon]

You are a great man Greg!

[CallawayINC]

i realy want to be able to do the email comfermation on my site but i cant find your other tutorial that u sayed u did ware it made the random generated key and sent it to there email. and i cant check your forums because your sites down. :C

[snowkiterdude]

watch php tutorial 27-32 from thenewboston its all there!

[huecitylite]

Thank you.

[javieruriel]

Hi there, how can i have all your videos about php i need to know all about php and mysql thanks

javieruriel

Do you have a dvd.

[MurderedAnimalFood]

Keep it up brother Bucky! You are a great resource to your peers. Quality is your strong point. That last video was not like you. Normally, you are very explanitive and clear.