discomatt

Sorry for the double post, but this had to be saidNEVER, EVER, EVER, EVER take user input and use it in your script without cleaning it.$_POST['whatever'] can contain whatever the user wants it to, and using it without stripslashing (in this case) is just begging to have someone abuse it

XML <> XHTMLTake that declaration out of your script!<?xml ?> has NO place in an HTML document, XHTML or not.

I'd suggest starting a new thread about that and at least showing you made an attempt to do this yourself.I don't tihnk many people here want to be your personal coder.

Feel free to bug me if you have MSN messengermmatt300 ***at@at*** hot mail dawt comSorry it's so cryptic... I get enough junk on that account as it is :angel:I love to help, just don't expect me to code for you. I'll be happy to provide helpful code and direction, just don't expect it to fit right into your scripts

I'm going to go against EVERYONE here.

Jumping into an existing Social Networking script is going to be extremely overwhelming, and confuse the *BLEEP* out of you.

What's your current PHP background? Beginner? I find the BEST starting script is a simple blog/news updating script. Once you've got that, add a user system to it, where multiple users can post.

Once you've got the extreme basics of a user-based content delivery system, I'd suggest starting to read into OOP (object-oriented programming) and design pattern theories. A gerat intro article by a friend of mine can be found here - http://www.phpfreaks.com/tutorial/design-p---introduction

More can be found in this link
http://www.phpfreaks.com/tutorials/page2

It's a long path, but there's so much to consider - especially when you're allowing anyone that connects to your site to manipulate your database

This is common on directories created with PHP. The default permissions will only allow the user that PHP is running in full control. You should make it a habit to CHMOD() (PHP has a built in function specifically for this http://de2.php.net/chmod/ every time you create a folder or upload a file. Keep in mind, unless you CHMOD 0777 your site's ROOT directory, it's still very difficult for other users on the system to access your files. You should also try your best NOT to use '../../' when locating files. I find it good practice to use $_SERVER['DOCUMENT_ROOT'] whenever possible. I have a variables.php I include with my script, in that I have the path to my script in relation to the document root, so I can call files as such mkdir( $_SERVER['DOCUMENT_ROOT'] . $_script_path . $foldername, 0777 )

Figure it's rude to just barge into Tech/Web Programming forums without introducing myself.I've been a PHP coder for about 6 years now, used to be a mod @ phpfreaks, and love the idea of having my hosting paid for by simply doing what I enjoy doing.Looking forward to helping you guys with PHP, SQL, RegEx, JavaScript and maybe even the occasional PS tutorial... just please don't ask me to code for you - I love to help, but only to those ready to put the effort in to learn :angel: