sinisteredd 0 Report post Posted April 3, 2008 Ok this is my idea: I am making a website about anime.Its function is add anime, review anime, search anime, anime information.Users can make a profile.People can make a profile which they can edit to theire likes with html to give it a fancy look.(this is what my problem is about)What i would like to know is how can i accomplish this.I already have the database for the anime titles etc ready, the only thing that needs to be done is the profile section.If you have any tutorial, tip or guide i would really really appriciate it.Thx in advance. Share this post Link to post Share on other sites
shadowx 0 Report post Posted April 3, 2008 Well making the basic framework for the Profile section is easy enough, give each user a row in a table with fields like Nickname, Headline, Basic info (contains ag2, sex, location) Interests, Fav Anime etc....... That will then give you the data to load into their profile. As for customizing it with HTML be very careful here, along with HTML they could use JS, AJAX, maybe even PHP and CSS to hack the site. My suggestion would be instead of using HTML make your own markup language like BBCODE eg <p> becomes [p] and only do this for certain tags in HTML like colour, size, and style tags. Filter their input with strip_tags() and enter the allowed tags, then have another line with a str_replace to re-write all tags. Or an easier way is simply to use strip_tags to remove anything that isnt a colour, paragraph, U, I, B, H1...etc..... so you would remove any JS, AJAX, PHP or links (as many spam bots love to post links) If you were thinking instead of having like a WYSIWYG editor it would be more complicated but still possible. The problems are going to be with security though, anything that allows users to input data is dodgy but anything that allows users to enter any amount of HTML or other code is like suicide unless you're really careful. As always be sure to strip out all quotes, slashes, and semi-colons to prevent the PHP from bugging and exposing code to the user. Share this post Link to post Share on other sites
sinisteredd 0 Report post Posted April 3, 2008 Thank you for that fast reply ^^.And you gave me just the right info to start with.And yeah i realise the risk of letting users use html, and i am considering to let usersshoose a layout which i created (this is the safest whay) instead of letting them use theire own html.Thx again, now i am able to work further on my page, which you will see when my hosting request gets aproved.Greets,Edd Share this post Link to post Share on other sites
menotti 0 Report post Posted April 3, 2008 I recommend you to use a free cms like joomla.org or a blogger like wordpress.org so you can focus on the content and not on the desingregards Share this post Link to post Share on other sites
shadowx 0 Report post Posted April 3, 2008 Using Joomla or similar CMS is a good idea but it offers less customization over the backend of things. Its a brilliant idea for non PHP/ASP'ers but as i think sinisteredd knows PHP i would say its better to write from scratch, it isnt too much work to do and it will offer better control over the backend framework and he will know the system inside-out making troublshooting and improvements easier Share this post Link to post Share on other sites
sinisteredd 0 Report post Posted April 4, 2008 Hmm the sugestion from menotti gives me another idea I could use some of the scripts from joombla or any other content management systemas a reference.And yea, I' don't want to use a content management system because it has so many features i wont use, and i love to have full controll about the code/designetc.Also I like to start from scratch because in the end it gives me the satisfaction that i've made the whole website to my likings and it would be easierto customise my own code (like shadowx says).And because the site is 50% ready I dont want to stop working on it and use a template or any other thing. I've put alot of work in it, so to move to another"content system" is no option ^^.If you have more sugestions/tips etc please post them, maybe it helps other people to who want to do something like I am.Thx for your help you 2. Share this post Link to post Share on other sites
shadowx 0 Report post Posted April 4, 2008 If you have more sugestions/tips etc please post them, maybe it helps other people to who want to do something like I am.Well for any website that lets a user register themselves a PHP CAPTCHA is always a good idea, or even just email verification. Email verification is a doddle, when the user first registers have an "active" field in the DB and set it to NO, send out the link to them to confirm with and that link takes them to a page with a unique ID that then updates the DB and sets their active status to YES. and when they login check the username, password, and the active field. If you're interested in a CAPTCHA there is a tutorial on T17: http://forums.xisto.com/topic/45058-a-simple-php-captcha-image-validation/CAPTCHAS are something im lucking atm so ill have a look at that too Let us know when the website is finished, i was thinking of making a profile site too, similar to most social networking sites like myspace etc... but with a big twist, but its just an idea at the moment (and no i wont tell what my secret ingredient is ) Share this post Link to post Share on other sites
sinisteredd 0 Report post Posted April 5, 2008 Hey thx for that tutorial, i prefer email valdiation & captcha because automated scripts getting, smarter and smarter every day. I once had a webpage (i wasn't that familier with php),and after a week there where 50 or more regsitered users, but they where al made by an automated script.So this time I'm gonna do it the right way .But i have a some more to learn about good protection.Haha yeah never reveal your secret ingredient.I'm also on a "secret project", and I think it's very orriginal because i never seen this consept on the web. Share this post Link to post Share on other sites
shadowx 0 Report post Posted April 5, 2008 I'm also on a "secret project", and I think it's very orriginal because i never seen this consept on the web Will it be on your profile website?Ive seen my feature once on a website but im developing it further than they have Share this post Link to post Share on other sites
sinisteredd 0 Report post Posted April 6, 2008 haha nope, it has nothing to do with my current website.hmm here's a smalllll hint: rigor mortis .... .And no it's not a suicide site ...... blehhh.ahh nice ... so you are gonna pwn them :D .whats the theme of youre project?I have found some good snippets for my profile website. *whohoo*Altough it may take some time because i have a busy 10 weeks on work ..... Share this post Link to post Share on other sites
oestergaard 0 Report post Posted April 10, 2008 Ok this is my idea: I am making a website about anime.Its function is add anime, review anime, search anime, anime information.Users can make a profile.People can make a profile which they can edit to theire likes with html to give it a fancy look.(this is what my problem is about)What i would like to know is how can i accomplish this.I already have the database for the anime titles etc ready, the only thing that needs to be done is the profile section.If you have any tutorial, tip or guide i would really really appriciate it.Thx in advance. Use PHP-fusion it's a very good and easy way to make a "profile" site. You can see my site: http://forums.xisto.com/no_longer_exists/ it's from PHP-fusion. Share this post Link to post Share on other sites
sinisteredd 0 Report post Posted April 12, 2008 I'd rather don't want to use any content management system because I wan't to control the backend.also i have 80% done so if I stop now it would be a wast of time ...And if I use a content management system I cant fully control my site our strouble shoot.My only problem right now is how can I list my users from mysql in a link like:- pipo- bob- janetc. etc.so when i click on them i go to theire profile page. Share this post Link to post Share on other sites
shadowx 0 Report post Posted April 12, 2008 Ive solved a problem like the above before, where i had to turn a list of items from a DB into a list of links that go to a certain page. The way i done it was to make a loop to retrieve the data into a variable then just echo that in the format: echo "<a href=profile.php?name=$USERNAME>$Username's Profile</a><BR> Repeat the loop with the NEXT statement and presto! Share this post Link to post Share on other sites
minimcmonkey 0 Report post Posted August 20, 2008 Really the best way is probably to use PHP and mySQL, each user has a html document, which is edited by a form, and processed by a PHP page, which saves to their own HTML document.The mySQL database would contain all of the users usernames, and passwords, contacts ect.Also, you would need to use some form of PHP or control to prevent users from using javascript, iframes ect, as this could be harmful to you site, and could allow easy access to hidden files, and could ed up with people displaying bad content. Share this post Link to post Share on other sites
PilzzE 0 Report post Posted September 16, 2008 For the listing of users you could use master-detail paging.This means you have page wich displays all the usernames ( this is the master page),when you klick on theire name you go tho theire profile ( this is the detail page).This is really easy done in dreamweaver klick here for a tutorial.And some tips:It may be easy that when a user registers, a script makes a new folder with the username wich containes: gallery (folder), style(folder wich containes css) and an index file.Also it may be wise to let your users only use css and html.Good luck Share this post Link to post Share on other sites