Well, however is most convenient and makes most sense for your application, of course. Just remember that it's not a good idea to store more than 10 thousand files on Linux servers in a single...
Validation should be done on both sides. You validate with JavaScript for the convenience of the visitor to your site or a user, because it is easier for them to see where they are making a mistake....
They are entirely different concept compared to including files. They cannot be compared at all. A class is a self-contained 'program' of sorts that can be used during...
First of all, please read about MySQL data sanitizing. Your code, as it stands right now, can be exploited more easily than Lindsay Lohan. Look into mysql_real_escape_string() function.
You would benefit from a lot of PHP tutorials. This is a huge topic. Look into things such as 'sessions', username/password validations and database connections.
You need to send data with proper headers, at the moment it returns text/plain instead of text/html (search Google for content-type headers setting with PHP). Also, you have an XML tag there for...
Well, your server itself will be safe, you don't have to worry about that. The only harm that JavaScript can do is to the user. If an advertiser enters a URL of the website that intends to harm your...
You should not worry. iFrames are always protected by the browser. If iFrames are from different domains then they cannot communicate unless both are cooperating.
HTTP_REFERER is not a good solution. Problem is that this can be modified by anyone since this is a data string sent by browser to the server as part of headers. And some browsers, like Internet...
While the code is a mess, I don't see where you are actually sending those $_POST variables to AJAX. It looks like it makes an empty request without those variables. There's no post variable handling...
I'm glad that I've been of assistance. I know it is a lot to handle right now, but I've been where you're at and you should not think of what you are doing today as 'bad' in any way (that is simply...
Ah.. Thanks Jeff. I had no idea. I usually don't expect this from people with postcount above thousand in web development forums. But I've certainly learned my lesson :)
Just for the sake of my amusement, I searched just that and Google did not give me 37 million responses, only 88 thousand. Anyways, how stubborn are you to make that your main point?
Procedural is basically an application that runs in a 'stream' of sorts. It loads bunch of files, based on user input calls various methods and does its job. Signs of a procedural code are usually...
It depends. If your application is procedural and not object-oriented, especially if database connection and queries are not object oriented, then it will be difficult to convert and make sure...
