Hi,

since a few months i started adding php codes almost everywhere INSIDE of the templates in VB (i use a hack that allows php code in templates since i don't know **** about plugins/products/hooks)

But i added a LOT of queries everywhere... and since i'm not familiar with vb variables i add my own queries and connections to the database.... I'm starting to think this could be a security hole if i ever have a mod who has access to the templates editing...

I have codes like this on a lot of pages:
could anyone suggest me an example code that uses VB variables and would allow me to not have to add my db's username and password every time?

thanks!

Well include global.php. That saves all the db info.

__________________

and what variables would replace $server, $user, $password and $database ?

or is there a function that will do all the mysql_connect things for me ?

You should be already connected. To read from the database it would be like $vbulletin->db->query_read/first/write, etc.

__________________

so i'm supposed to use something like $vbulletin->db->query_read "SELECT myfield FROM mytable" for my queries ?

i'm a bit confused