Part 2: Application extjs using layout browser
Saturday, February 20th, 2010This tutorial just only improve my previous tutorial about appliaction extjs, because in my previous tutorial there are errors or bugs. i create this application in extjs 2.1.0, and for along time, extjs team create a new version extsj, is ext-3.1.0. when i executed this application there more function does not work. But now the problem is clearly.
below are problem or error in first vertion.
1. Login: if you know about sql injection, you can login in, although you did know the password. Know i have been fixed it using this script.
$username = stripslashes(trim($_POST["username"]));
$password = stripslashes(trim($_POST["password"]));
$passwordhash = stripslashes(trim(md5($password)));
$query = sprintf("select * from user where username='%s' and password='%s'",
mysql_real_escape_string($username ),mysql_real_escape_string($passwordhash ));
