mysql designing a forum

[alexho]

im now switching to near pure mysql on my forum almost all the smaller things such as topics are stored in txt files. Threads everything else including users and passwords are stored in mysql tables.

my question is for the forum, what would be the best method and or structure for displaying this data by means of fetching array function taking the data from my mysql tables including topics/threads and individual post data, and putting it out onto the pages. loop data from the top? in php.ini i suppose i should increase the memory memory_get_usage it might get slower but there functions that can be useful. I do not know if i should load every single thing into memory possibly the best bet is to take it like so?


in order for this forum to be anyway like a forum i have to order it by ORDER BY id in desc order newest posts on top

initial page is null
$start=(getpgvalue)*10;
$end=$start+10;

for the fetching in mysql 

how would i do the above with mysql
there are of course functions that could all rows in a table so i could divide by 10 for the number of pages..

displaying threads for a page
displaying posts in the thread page

similar looping idea, almost same concept of 0 or null page *10 start loop and end loop +10.

And oh yea, besides mysql injection any major vulnerabilities that might arise of which i should think about?

mysql is a snap compared to pure files. how about $_POST (exploits)??

 

[oorosco]

I'm pretty sure you got the wrong forum buddy

 

[linamus]

Mostly of us are dumb people who had never went deeper into webmaking syntax. So that's nether right forum, and most likely right site









___________________________

Best Ideas Comes When You're Not Thinking
-> The Land Of Wonders
-> Simple Equipment System TuT
-> Enhance Your Terraining
-> Change Warcraft UI Style

 

[enouwee]

___________________________

Best Ideas Comes When You're Not Thinking

I'd suggest you stop manually adding a signature to your posts... bad things (TM) might happen. If you can't define one in your profile, there might be a reason to it.


As for the topic: what could go wrong? cross-site request forgery, cross-site scripting, remote code include, ... pick your favourite exploit.

Given your initial "plan", I'd suggest to use an off-the-shelf forum software. It won't kill the server (you're on a shared host, aren't you?) either immediately, or later, because your code doesn't scale.

Which MySQL version are you using?

 

[alexho]

-the latest v & shared.

-problem is that i like doing everything myself heheh.
-going off someone else's code defeats my whole purpose lol, since im learning.

because i know well enough there are many exploits that might be my only problem. I'm fine with input exploits. I could just 'look' for forum software code and just implement it to my forum. I see no reason why I couldn't create a forum on my own, people have doubted me in the past not to go flat file and i made a flat file forum it performs very well, but now i want to move on to tackling mysql which will sort of be similar to my flat file except everything will be stripped and turned to mysql with obviously better methods and more advanced and innovative stuff.