Page 2 of 2 FirstFirst 12
Results 11 to 17 of 17

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

  1. #11
    Senior Member BorderFox's Avatar
    Join Date
    Sep 2005
    Posts
    1,933
    Under the important links, there is a line that says "tell others to join us"

    when you click on the link, this comes up.

    Friends, I am supporting Hold Their Feet to the Fire 2007 to try and stop Amnesty for illegal aliens. I hope you will support my efforts by either joining us in Washington DC or flooding the offices in Congress with calls to Stop Guest Worker Amnesty! For more details, please visit [there is nothing here]

    Someone needs to add a link there.
    Deportacion? Si Se Puede!

  2. #12
    Administrator ALIPAC's Avatar
    Join Date
    Nov 2004
    Location
    Gheen, Minnesota, United States
    Posts
    67,953
    Good feedback folks.

    Yes, John and Ken are going and we need to make sure they are on the list.

    I will make sure JP gets your messages and touches things up as soon as possible.

    Keep looking for improvement for us please.

    W
    Join our efforts to Secure America's Borders and End Illegal Immigration by Joining ALIPAC's E-Mail Alerts network (CLICK HERE)

  3. #13
    Senior Member
    Join Date
    Sep 2006
    Location
    Dallas
    Posts
    1,149
    ok whereever you have this:
    SRC="http://www.holdtheirfeettothefire.org/images/hold_their_feet_to_the_fire_left_banner.gif"

    you need to hide the path to the images folder.
    If i go to the url address in my browser (and anyone else for that matter)
    and type in http://www.holdtheirfeettothefire.org/images
    bamo i'm inside the images folder on your server, a great place for hacking to start.

    so instead do something like SRC= "../images/hold_their_feet_to_the_fire_left_banner.gif"

    this goes for anyplace else that you may have a url pointing to a file on the server.

    also if I click on the submit button at the bottom of the form (also on the email sign up)on the page it actually submits and gives me the "thank you ..." text. You may want to put some script in to check for blank entries, full address etc. using a pop up.
    AND be sure that the script scrubs out any characters like " / .. ' \ // etc." you want alpha numeric only (helps prevent sql injection attacks).

  4. #14
    Senior Member jp_48504's Avatar
    Join Date
    Apr 2005
    Location
    NC
    Posts
    19,168
    Quote Originally Posted by anniealone
    Under the important links, there is a line that says "tell others to join us"

    when you click on the link, this comes up.

    Friends, I am supporting Hold Their Feet to the Fire 2007 to try and stop Amnesty for illegal aliens. I hope you will support my efforts by either joining us in Washington DC or flooding the offices in Congress with calls to Stop Guest Worker Amnesty! For more details, please visit [there is nothing here]

    Someone needs to add a link there.
    Thats a Javascript Link and if Javascript is turned off in your browser settings or security settings then it wont work. It should open your email and include the link.
    I stay current on Americans for Legal Immigration PAC's fight to Secure Our Border and Send Illegals Home via E-mail Alerts (CLICK HERE TO SIGN UP)

  5. #15
    Senior Member jp_48504's Avatar
    Join Date
    Apr 2005
    Location
    NC
    Posts
    19,168
    Quote Originally Posted by Dagmar
    ok whereever you have this:
    SRC="http://www.holdtheirfeettothefire.org/images/hold_their_feet_to_the_fire_left_banner.gif"

    you need to hide the path to the images folder.
    If i go to the url address in my browser (and anyone else for that matter)
    and type in http://www.holdtheirfeettothefire.org/images
    bamo i'm inside the images folder on your server, a great place for hacking to start.

    so instead do something like SRC= "../images/hold_their_feet_to_the_fire_left_banner.gif"

    this goes for anyplace else that you may have a url pointing to a file on the server.

    also if I click on the submit button at the bottom of the form (also on the email sign up)on the page it actually submits and gives me the "thank you ..." text. You may want to put some script in to check for blank entries, full address etc. using a pop up.
    AND be sure that the script scrubs out any characters like " / .. ' \ // etc." you want alpha numeric only (helps prevent sql injection attacks).

    Thanks, I'll inform the DB person about the SQL. I can close out the images dierctory with a simple file.
    I stay current on Americans for Legal Immigration PAC's fight to Secure Our Border and Send Illegals Home via E-mail Alerts (CLICK HERE TO SIGN UP)

  6. #16
    Senior Member jp_48504's Avatar
    Join Date
    Apr 2005
    Location
    NC
    Posts
    19,168
    Ok,
    All corrections have been made that I am able. I appreciate everyone's input on this. It makes it a lot easier to get things done.
    I stay current on Americans for Legal Immigration PAC's fight to Secure Our Border and Send Illegals Home via E-mail Alerts (CLICK HERE TO SIGN UP)

  7. #17
    Senior Member
    Join Date
    Sep 2006
    Location
    Dallas
    Posts
    1,149
    Quote Originally Posted by jp_48504
    Ok,
    All corrections have been made that I am able. I appreciate everyone's input on this. It makes it a lot easier to get things done.
    Glad to help.

Page 2 of 2 FirstFirst 12

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •