Advertisement
Guest User

Untitled

a guest
Oct 29th, 2018
102
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.00 KB | None | 0 0
  1. Here in this part there will be no"operator_id":
  2.  $myusername = $_GET['operator_id'];
  3.     $mypassword = $_GET['telegram_key'];
  4.     
  5.     $query = $db->prepare("SELECT * FROM telegramlog WHERE operator_id = ? and telegram_key = ?;");
  6.     $query->execute(array($myusername,$mypassword));
  7.     $count = $query->rowCount();
  8.  
  9. There will be only:  $mypassword = $_GET['telegram_key'];
  10. operator_id you’ll have to find out with  $_GET['telegram_key']..
  11.  
  12. We can’t send stable data that are saved in the database - security. So it will only send the key
  13. = $_GET['telegram_key'].
  14.  
  15. So you will have to extend it:
  16.  $query = $db->prepare("SELECT * FROM telegramlog WHERE telegram_key = ?;"); 
  17.  $result = $query->execute(array($mypassword));
  18.  if($result){
  19.    $mypassword = $result[0]['operator_id'];
  20.  
  21. Only an example :) So from telegram you will only get one data and that is telegram_key, nothing more
  22.  
  23.  
  24. That email was sent to me, I am creating a log in forms or form and I don’t really get it
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement