1 on 1 PHP Code help

[jim_bo]

Hi,

I have built a cms management site for car sales yards, it functions well but I after someone who is prepared to help me cleanup the code 1 on 1 via msn.

I can trade the person a copy of the site .. Its done in such away it can be resold over and over to other car yards.

I am mostly looking to help get some code cleaned up and extra security as I havnt got my head around all the best security ideas for sql injection etc.

If you interested feel free to contact me, but only if you are keen and have reasonable php skills.

Thanks!

[Piranha]

I doubt that anyone will go through all your code to help you out. But I might be wrong.

The best way to prevent from SQL injection is to be sure to use mysql_real_escape_string for all strings and (int) for all integers. And of course to use apropriate methods in all other requests to the database as well. An example:

$sql = sprintf(SELECT id
   FROM table
   WHERE int = %s    // Note that this should not be %s, I just can't remember what letter it should be
   AND string = '%s'),
   (int) $int_value,   // Handle all integers in this way
   mysql_real_escape_string($string_value)  // Handle all strings this way
);