PHP - Website Help And Opinions

Hi

I am looking for opinions on the best way to secure user passwords. I am currently using crypt() with a 32 bit salt string... now my main question here would be: Should I store a randomly generated md5 hashed salt in the database for each user, or maybe a single salt string in a config file?

I am looking for the most secure option here.

I am finally getting my blog started.

Actually having allot of fun with it to be honest, so far what I have been thinking about is actually working for a change lol.

This is more in some ways to show you what I can do actually aswell, all of the below code is obviously in procedural, but would you change anything at all?

I mean I know all of the below code is going to be a matter of preference, it works though so far, but I have been reading a few books and sort of memorised allot of it, all of the code below is my own perceptions of course, what do you think?

Here's my logic (I have excluded my 'inc.database.php' file, as that's got my mysql database login details), here it is anyways:
Code: [Select]
<?php
ini_set('display_errors', 1);

// include the database connection!
require_once 'inc.database.php';

function get_category($category_id) {
  $sql = 'SELECT category
          FROM blog_categories
  WHERE category_id = '.$category_id;
  
  $result = mysql_query($sql);
  $row = mysql_fetch_assoc($result);
  extract($row);
  
  return $category;
}

// function get_responses($category_id, $post_id){
function get_responses($post_id){
  
  $post_id = mysql_real_escape_string($post_id);
  
  $sql = 'SELECT post_title, post_text, date
          FROM blog_posts
  WHERE isreply = 1 AND parent = '.$post_id;
  
  $result = mysql_query($sql);
  return mysql_num_rows($result);
}

require_once 'header.html';

// if user has not selected a category in the URL then display the category links!
if(!isset($_GET['category'])) {
  printf("<p>Please select a blog category</p>\n");
  
  $sql = 'SELECT category_id, category
          FROM blog_categories
          WHERE avail = \'Y\'
  ORDER BY category';
  
  $result = mysql_query($sql);
    
  // weird but if there's an error show the user firstly!
  if(!$result) {
    
printf("<p class=\"error\">Could not contact server, please try again later.</p>");
  
  } else {
  
  if(mysql_num_rows($result) > 0) {
    
    // else loop and output the category as links, so get can be retrieved the find all the posts:
    while($row = mysql_fetch_assoc($result)) {
      extract($row); // turns headings of column names into variables, so dont have to use $row['colname'] in database, like so:
      printf("<p><a href=\"index.php?category=%d\">%s</a><br /></p>\n", $category_id, $category);
    }
  
  } else {
    printf("<p>No categories available</p>");
  }
}
  
  } else {
  
    // trim the category, so someone isnt being stupid and tries to create like a DOS with empty spaces in the category URL
trim($_GET['category']); // removes any blank spaces

// if category ident is not empty:
if($_GET['category'] != ''){
  
  // make input safe:
  $category_id = mysql_real_escape_string($_GET['category']);
  
  // now need to select from which category it is!
  $sql = "SELECT post_id, post_title, post_text, date, username, category 
              FROM blog_posts
              LEFT JOIN blog_users ON blog_posts.user_id = blog_users.user_id
              INNER JOIN blog_categories ON blog_posts.category_id = blog_categories.category_id
              WHERE blog_posts.category_id = $category_id AND approved = 1 AND isreply != 1";
  
  $result = mysql_query($sql);
  
  printf("\n<h2>%s</h2>\n", get_category($category_id)); // calls a function to get the category name!
  
  if(mysql_num_rows($result) > 0) {
    // display the rows of posts:
    while($row = mysql_fetch_assoc($result))
    {
      extract($row);
      printf("<h3>%s</h3>\n %s<br />\n By %s  %s \n<br />", $post_title, $post_text, $username, $date);
  
  // get the no of replies and maybe even at some point show the oldest replies first:
  // get_responses($category_id, $post_id);
  printf("No of comments %d</p>",get_responses($post_id));
    }
  } else {
    printf("<p>No posts exist in this category</p>\n");
}

  } else {
  printf("<p class=\"error\">You did not select a blog category, please try again.</p>");
  }
}
  
require_once 'footer.html';
?>

Of course with the init_set('display_errors', 1) is set to true just for debugging though, when I am happy with it going live I will make this 0, so no errors appear to the user, but what do you think?

It is of course entirely reading from the database, no input on this page, as that will be on other scripts.

Thanks and I look forward to any replies,
Jez.

I'm trying to make a League of Legends (a video game) community website, both as a personal project and for practice.
Now the game has a lot of champions, each of whom have 5 unique abilities. Now, I thought about manually inputting all the details about each champion into a MySQL database, but that would long and tedious, and I don't really have the time for it now. Also, the game patches very oftern (like, once every 2 weeks) which changes many of the stats, etc. of the champion, and it is not possible for me to keep manually updating these every time there is a patch.

Fortunately, there is a League of Legends Wiki which has all the data I need in their specific champion pages, which they keep updated per patch. So I was wondering if there was any way to get the data from the divs in the wiki, and have it display on my site. What I want to do in my website is that whenever someone types a champion's name (in a post or whatever), I want it to display a hover-over dialog with some of the champions details. And a lot of other features such as that.

In plain English I need a way to :
> Tell PHP to go to the wiki's source code on a specific page
> Find a specific div container
> Get X data from there
> Pass X data into a function to display the hover-over

I think this way, I would not have to maintain a database as I can leech off the wiki's data.
I have not coded anything like this before, so I would like a few pointers as to how to achieve this. Any help will be appreciated!

I tried searching on google but couldn't find any relevant information, please redirect me to relevant source or help me with the code.

I want to pass a domain name in text field which will be scanned and then the script will display entire site map.

Not external links or links on a page. Sorry it is not easy for me to explain.

Eg. if i pass abc.com

Script will display

abc.com/12/adn.php
abc.com/asd/asd/
etc

Whatever their url format is.

All the links on that domain.

hello
My database is in a same server with seperate domain name , then I want to insert from website1 mysql data on website2 mysql data.
can anyone help me?