some bad structures in new version of phpUserClass

Hello dear,

1. recently discovered a bug in using md5 and sha1 (its behavior in the hash of space). you should not only use these algorithms , for more security you should use a salt.
2. in the escape function you only specified magic quotes and addslashes function. you think , if a user has a server with old/oldest version of php! or the addslashes is disabled on his/hers server... . the solution is , you specify if the addslashes is exists then addslash the variable else use mysql_real_escape_string . my fantastic function is yours now:

Code:

function EscapeQuotes( $string ) {

$conn = new ConnectToDatabase();

if( get_magic_quotes_gpc() ) {
return $string;
}
else {
if( function_exists('addslashes') ) {
return addslashes( $string );
}
else {
return mysqli_real_escape_string( $conn->connect, $string );
}
}
}

3. use get_defined_constants() to know all constants in php. i want to say, FALSE and TRUE are constants and a coder should know that and should write all constants in upper case.

[Join us @ facebook]

Thanks for sharing

BTW check the newest class in gitHub: https://github.com/HumanWorks/phpUserClass

[Guest]

[62.845]

Googlebot, Kim_smith