Welcome to Nightfall Personal Diary!
Welcome to the News Page! Please check back regularly for news updates about the site!
Listed below is all of the recent news:
Login.asp, ForgotPassword.asp, and Join.asp have been updated to fix a small security risk in the database. Please download a new copy of the script, or change it yourself with the following simple changes:
Login.asp - About 11 lines down Find:
If Username <> "" and Password <> "" Then
on the line AFTER that put:
Username = Replace(Username, "'", "")
Join.asp - About 13 lines down Find:
If Username <> "" and Password <> "" and email <> "".............
theerror=0
On the line below that, above dim connection you need to add the following lines:
Username = Replace(Username, "'", "")
Password = Replace(Password, "'", "")
cPassword = Replace(cpassword, "'", "")
Email = Replace(email, "'", "")
Name = Replace(name, "'", "")
dob = Replace(dob, "'", "")
mf = Replace(mf, "'", "")
ForgotPassword.asp - About 6 lines down find:
If Username <> "" and email <> "" and dob <> "" then
On the line under that put this:
Username = Replace(Username, "'", "")
email = Replace(email, "'", "")
dob = Replace(dob, "'", "")
Save all 3 files and Problem Solved! :-)
