The Joomla! Forum™

lobos

Well I dunno for sure like I said, but I know for one of my components there are sessions that are set which, if compromised, could cause a significant risk, maybe other components could have problems as well. This is why it would be better to set the session in a sub-dimension of the sessions array...

lobos

Never mind: Problem solved. In case anyone else wants to know, I used: $_SESSION = array_merge($_SESSION,$_REQUEST); David be careful with this, it has security nightmare written all over it... one could set any session variable from the url, well maybe... not sure... but be careful -Lo...

lobos

This may help:

http://www.php.net/stripslashes

-Lobos

lobos

You just need to add exit() or die() after component processing is completed.

for example - mycomponent.php

echo 'helloworld';

die();

?>

Your component will be process within joomla and no templates or modules will be processed or rendered.

-Lobos

lobos

ps: don't forget to close () that

lobos

$db = JFactory::getDBO();
$user = &JFactory::getUser();
$sqlout = "SELECT * FROM `jos_chronoforms_3` WHERE `username` ='$user->username'";

$db->setQuery($sqlout);

$rows = $db->loadObjectList();

foreach ( $rows as $row ){
?>
Name: name; ?>

Date: recordtime; ?>

Topic 1: topic1; ?>

}
?>

I haven't tested this, but it should work...

-Lobos

lobos

Opie wrote:Aren't there some other tables that are required to be updated?

Hmmm I don't think so, I did this awhile back so I am not 100% sure, but try it anyway and see if it works

-Lobos

lobos

Sorry I didn't know you were using 1.5... I am sure you can find out the correct function for yourself now that you understand the concept.

-Lobos

lobos

You will need to pull the data from the database into an array. After this you will use a foreach statement to iterate thru the array from the database and build your select values.

-Lobos

lobos

Do you see the id's come up in the URI / URL ? - if so you can get the id like this:

$id = mosGetParam( $_REQUEST, 'id', '' );

-Lobos

lobos

$add_query="insert into sponsors values('','$_REQUEST[idda]','$_REQUEST[myID]')"; For God's sake don't use unfiltered variables from the url in your sql. Google "sql injection" or better yet use this instead of straight $_REQUEST: $idda = mosGetParam( $_REQUEST, 'idda', '' ); $myID = mosGetParam( $...

lobos

You will need to connect to the joomla database and use the following sql to inject the user: $sql = "INSERT INTO jos_users ( name, username, email, password, usertype, gid, registerDate ) VALUES ('$full_name', '$username', '$email', '$password', 'Registered', '18', '$date')"; -Lobos

lobos

I guess there are a few ways to do this... you could always save the get / post variables to a session var on the error page, something like this: at the top of the page: session_start(); $_SESSION['formvalues'] = $_REQUEST; //this will save all post and get variables. Then you hack the registration...

lobos

Well you can always access global variables like this, but I am not sure if it will work as the database global might be tied to other functionality...

This is how you access a global variable:

$GLOBALS['database'];

or at the top of your function:

function myfunction(){

globals $database;

lobos

You have a great one too

lobos

Yeah chill out, I didn't insult anyone either - I was just stating that I don't bother. I am a commercial dev and it has been stated time and time again here that I should take my IP elsewhere so why should I bother posting where I am not wanted? The main reason I am here at the moment is to have in...

lobos

Just do like me, a.k.a. don't bother...

lobos

WTE is a commercial site, offering a few free products, More free products than commercial ones... the WTE site revolves around a purely open source product which is incidently called... WTE... ( don't forget the 50 free templates as well! ) in fact if you want to get picky you could say that anysi...

lobos

Yeah I see now, thanks for clarifying, I understand that you don't want the forums to become a craigslist!... As a suggestion, why not have a trashbin thread for posts like these, ie keep them in the bin for 24 hours or something then delete. I ask this because the data can then be saved by those wh...

lobos

Thanks, but I failed to save the stuff Jean said about WTE, I need this becuase it addresses a few issues with WTE that will need to be addressed. Anyway Jean, if you find the time could you place a summary of your concerns at my forum (the link is in my sig). Thanks.

lobos

YAY we got the post revived! See, one must always question authority! And I stress again: We are all batting for the same team and I hope we can put all of this behind us edit Unforunately the detailed observation posts made by Jean were not..., these were invaluable to me and probably a consi...

lobos

mmmedia is constantly deleting, my and a few other's posts in the templating forum, I am not sure why as they don't seem in conflict with the terms and conditions or is it a term and condition that you do not question the moderator's actions in anyway??? We are only asking why she deleted posts whic...

lobos

Jean.. there are other forums that deal with extensions. Namely the Components ..... The entire thread regarding WTE was off topic and had to be removed.... Don't you mean moved? Why is it that you remove posts about WTE, yet move other posts? Why not give a friendly warning and tell us to mo...

lobos

oh my gosh... try to give someone a helping hand, ie point them to something (open source) that can provide a solution to something that the joomla core templating system cannot and we get this... Mod Note: Splitting this post and moving to Sites & Infrastructure - Feedback/Information -MMMedia

lobos

Guess I jumped the gun a bit!!!

YAY my news has been posted! You can see it at:

http://www.joomla.org/content/view/1695/37/

-Lobos

lobos

Hi there,

I posted some news to the the news area of joomla.org yesterday and it hasn't come up while other news items have come up today... so i am wondering how long does it take for news items to be posted and if they are not accepted do you give notification?

TIA

-Lobos

lobos

OK, fair enough I get the picture

Good bye then.

lobos

Your theming engine may be free, you sell templates for your theming engine through your website, and anyways regardless of free or commercial, continually linking to your site to promote your products is advertising/self promotion. Yes but when I am offering help to people in the templates forum t...

lobos

If you take a look at the rules located here: m you will see that posts that are strictly made for self promotional purposes are forbidden. You have now made more posts regarding your commercial product through out the forums today. But it is not a commmercial product, The Webvida Theme...

lobos

Recently I completed work on a script that would allow a Smarty Based Templating Solution for Joomla. The code is GPL and the soution is very nice for template designers to use. Excited my finally finishing this I rushed to the Joomla site to post my news, I also posted it in the templates forum as ...

The Joomla! Forum™

Search found 30 matches

Re: How to back previous page with values just entered

Re: How to back previous page with values just entered

Re: mosDBTable-apostrophes & backslashes?

Re: Skip Template Rendering

Re: Need php/mysql help -- I think I need a "foreach" -- how to do it?

Re: Need php/mysql help -- I think I need a "foreach" -- how to do it?

Re: Add User into Joomla DB from 3rd Party Script

Re: How to get section and categorie id?

Re: how to call values in select box.

Re: How to get section and categorie id?

Re: how to solve if Value does not insert into database...

Re: Add User into Joomla DB from 3rd Party Script

Re: How to back previous page with values just entered

Re: How to access Joomla global variables from non-Joomla sub-directory

Re: KL_RSSFEED Newsrelease

Re: KL_RSSFEED Newsrelease

Re: KL_RSSFEED Newsrelease

Re: Self Promotion Moderation Objection

Re: Self Promotion Moderation Objection

Re: Dreamweaver template in design view

Re: Heavy Handed moderation...

Heavy Handed moderation...

Re: Dreamweaver template in design view

Self Promotion Moderation Objection

Re: Clarification on News Postings

Clarification on News Postings

Re: I am confused

Re: I am confused

Re: I am confused

I am confused