Protecting the site & AJAX
It's been a long time since I've spent so many hours on something producing such a small visible result. First of all I had to learn all about protecting PHP code and form fields that are inserted into the database when logging in with mysql_real_escape_string and the joys of some servers having magic_quotes_gpc enabled and when stripslashes should and shouldn't be used. I've finally protected the code enough from malicious visitors - I don't want to end up like the old imphenzia forums once were if you remember those days. Since I already developed the login / logout / remember me features of the new sites yesterday, the 4 hours I spent on just protecting the code was just plain boring - but not wasted as the result is good and I learned something very useful. Originally I used a javascript called " Live Validation " to verify the contents of form fields as you type in them and the result was quite cool - what it didn't support, however, was verif...