Creating an App from Scratch: Part 9

Hold on... This isn't EnnuiDesign.com — What Gives?

It's been a long time coming, but Jason Lengstorf, formerly of Ennui Design, has expanded his team to include Drew Douglass, Rob MacKay, Henry Moran, and Tom Sturge.

It didn't feel right to keep the same name, so we decided to continue on as Copter Labs. You can expect the same great content under this new name!

Creating an App from Scratch: Part 9

Bugs, Security, and Other Tweaks

There were supposed to be only eight parts to this series, but as we started releasing them, Chris and I realized that there was going to need to be a follow-up post to address some of the bug fixes, security patches, and a few other minor changes.

NOTE: All the changes we're going to cover in this article are already included in the source code.

Bug Fixes

After releasing the live app, a handful of bugs showed up in the comments. We tried to address these as quickly as possible to keep the app from causing unnecessary grief for our users. We'll go over the major bugs here.

Account Created, List Failed Error

The first thing we saw was that when there were more than just one or two people trying to create accounts, the app started failing to create user lists after an account was created. Upon reviewing the code, I found that the error seemed to be coming from the following line:

$userID = $this->_db->lastInsertId();

$userID seemed to be unreliable, and therefore the query to insert a new list into the database was failing regularly. To fix this, we implemented a complex query that worked around the use of lastInsertId():

            /*
             * If the UserID was successfully
             * retrieved, create a default list.
             */
            $sql = "INSERT INTO lists (UserID, ListURL) VALUES
                    (
                        (
                            SELECT UserID
                            FROM users
                            WHERE Username=:email
                        ),
                        (
                            SELECT MD5(UserID)
                            FROM users
                            WHERE Username=:email
                        )
                    )";

Performance-wise, this is going to be slower than the original post, but it's incredibly more reliable (since implementing this fix, we've had no reports of this error). Any MySQL supergeeks who may have a better solution, please post it in the comments!

Double-Clicking "Add" Sometimes Added Duplicate Entries

One little user interface quirk that was discovered was that you could click multiple times in succession on the "Add" button. In our original JavaScript, we only cleared the value of the input field upon a successful AJAX result. That is ideal, since when that text disappears that is your visual queue that it's been added to your list successfully. Plus, generally that happens quickly enough it feels pretty instant. However, if you straight up "double-click" on that add button (which people absolutely still do that), you might get two or more requests off before the success comes back and clears the fields (when the field is clear, the submit button will do nothing).

One method to fix this could have been to clear the field as soon as a click happens, but the problem there is that if the save is unsuccessful you'll lose your text. Instead, we just add a little more smarts. When the submit button is clicked and there is text ready to add, the AJAX request is made and the button is disabled. Upon success, the field is cleared and the button is re-enabled. This ensures only one submission is possible.

In /js/lists.js, we added the following at line 114:

    $('#add-new').submit(function(){

       //  ... variables and whitelist stuff ...

        if (newListItemText.length > 0) {
            // Button is DISABLED
            $("#add-new-submit").attr("disabled", true);

            $.ajax({

                // Ajax params stuff

                success: function(theResponse){

                    // list adding stuff

                    // field is cleared and button is RE-ENABLED
                    $("#new-list-item-text").val("");
                    $("#add-new-submit").removeAttr("disabled");
     }

NOTE: As you can see, we remove the "disabled" attribute entirely upon a successful response from our query. That is the only way to re-able a submit button. Setting disabled to "false" has no effect.

Changing Email Address with a Blank Email Crippled Account

It was also brought to our attention that clicking the "Change Email" button with a blank field would not only succeed, but would cripple the account and make it unusable. Fixing this was as simple as making sure the email address submitted was valid by inserting the following in the updateEmail() method in /inc/class.users.inc.php:

        if( FALSE === $username = $this->validateUsername($_POST['username']) )
        {
            return FALSE;
        }

Then, instead of binding the $_POST value to the query, we bind the new variable $username, which contains the valid email address if the check didn't fail. Note the use of the new function validateUserEmail()—we'll go over that in the next section on security.

Security Issues

After we worked the bugs out of our app, we turned to the security holes that were pointed out by commenters. Some of these were simple oversights on our part, and some of the problems were news to us. With the help of our readers, though, we tried to patch everything up.

JavaScript Could Be Inserted Into Edited Items

When creating new items, we checked for any JavaScript in the input using the cleanHREF() function, then stripped out unwanted tags on the server side using strip_tags() and a whitelist of acceptable tags. However, we had missed that JavaScript could be inserted into existing items when they were edited. To correct this issue, we turned to a preexisting input sanitizing function (lines 00326-00384) posted by Zoran in the comments of Part 8.

We wrapped the code in a method called cleanInput() and placed it in /inc/class.users.inc.php:

    /**
     * Removes dangerous code from the href attribute of a submitted link
     *
     * @param string $input        The string to be cleansed
     * @return string            The clean string
     */
    private function cleanInput($data)
    {
        // http://svn.bitflux.ch/repos/public/popoon/trunk/classes/externalinput.php
        //  ---------------------------------------------------------------------- 
        // | Copyright (c) 2001-2006 Bitflux GmbH                                 |
        //  ---------------------------------------------------------------------- 
        // | Licensed under the Apache License, Version 2.0 (the "License");      |
        // | you may not use this file except in compliance with the License.     |
        // | You may obtain a copy of the License at                              |
        // | http://www.apache.org/licenses/LICENSE-2.0                           |
        // | Unless required by applicable law or agreed to in writing, software  |
        // | distributed under the License is distributed on an "AS IS" BASIS,    |
        // | WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or      |
        // | implied. See the License for the specific language governing         |
        // | permissions and limitations under the License.                       |
        //  ---------------------------------------------------------------------- 
        // | Author: Christian Stocker <[email protected]>                        |
        //  ---------------------------------------------------------------------- 
        //
        // Kohana Modifications:
        // * Changed double quotes to single quotes, changed indenting and spacing
        // * Removed magic_quotes stuff
        // * Increased regex readability:
        //   * Used delimeters that aren't found in the pattern
        //   * Removed all unneeded escapes
        //   * Deleted U modifiers and swapped greediness where needed
        // * Increased regex speed:
        //   * Made capturing parentheses non-capturing where possible
        //   * Removed parentheses where possible
        //   * Split up alternation alternatives
        //   * Made some quantifiers possessive

        // Fix &entityn;
        $data = str_replace(array('&amp;','&lt;','&gt;'), array('&amp;amp;','&amp;lt;','&amp;gt;'), $data);
        $data = preg_replace('/(&#*w )[x00-x20] ;/u', '$1;', $data);
        $data = preg_replace('/(&#x*[0-9A-F] );*/iu', '$1;', $data);
        $data = html_entity_decode($data, ENT_COMPAT, 'UTF-8');

        // Remove any attribute starting with "on" or xmlns
        $data = preg_replace('#(<[^>] ?[x00-x20"'])(?:on|xmlns)[^>]* >#iu', '$1>', $data);

        // Remove javascript: and vbscript: protocols
        $data = preg_replace('#([a-z]*)[x00-x20]*=[x00-x20]*([`'"]*)[x00-x20]*j[x00-x20]*a[x00-x20]*v[x00-x20]*a[x00-x20]*s[x00-x20]*c[x00-x20]*r[x00-x20]*i[x00-x20]*p[x00-x20]*t[x00-x20]*:#iu', '$1=$2nojavascript...', $data);
        $data = preg_replace('#([a-z]*)[x00-x20]*=(['"]*)[x00-x20]*v[x00-x20]*b[x00-x20]*s[x00-x20]*c[x00-x20]*r[x00-x20]*i[x00-x20]*p[x00-x20]*t[x00-x20]*:#iu', '$1=$2novbscript...', $data);
        $data = preg_replace('#([a-z]*)[x00-x20]*=(['"]*)[x00-x20]*-moz-binding[x00-x20]*:#u', '$1=$2nomozbinding...', $data);

        // Only works in IE: <span style="width: expression(alert('Ping!'));"></span>
        $data = preg_replace('#(<[^>] ?)style[x00-x20]*=[x00-x20]*[`'"]*.*?expression[x00-x20]*([^>]* >#i', '$1>', $data);
        $data = preg_replace('#(<[^>] ?)style[x00-x20]*=[x00-x20]*[`'"]*.*?behaviour[x00-x20]*([^>]* >#i', '$1>', $data);
        $data = preg_replace('#(<[^>] ?)style[x00-x20]*=[x00-x20]*[`'"]*.*?s[x00-x20]*c[x00-x20]*r[x00-x20]*i[x00-x20]*p[x00-x20]*t[x00-x20]*:*[^>]* >#iu', '$1>', $data);

        // Remove namespaced elements (we do not need them)
        $data = preg_replace('#</*w :w[^>]* >#i', '', $data);

        do
        {
            // Remove really unwanted tags
            $old_data = $data;
            $data = preg_replace('#</*(?:applet|b(?:ase|gsound|link)|embed|frame(?:set)?|i(?:frame|layer)|l(?:ayer|ink)|meta|object|s(?:cript|tyle)|title|xml)[^>]* >#i', '', $data);
        }
        while ($old_data !== $data);

        return $data;
    }

Then, we modified updateListItem() on line 239 to call the new method:

        $newValue = $this->cleanInput(strip_tags(urldecode(trim($_POST["value"])), WHITELIST));

CATCH: This function appears to encode any non-English characters. Foreign language users may see some unexpected behavior.

Cross-Site Request Forgeries

Another risk we hadn't considered when building this app was the possibility that a malicious user could send bogus requests to our app by piggybacking on a Colored Lists user's session in a form of attack called Cross-Site Request Forgeries (CSRF). The snippet of JavaScript below, placed on any site, would be executed if a user that was logged in to our app were to visit the page. (Huge thanks to Dan at Sketchpad for pointing this out and providing the above sample attack.)

    <script type="text/javascript">   
   
        var form = document.createElement("form");
        form.setAttribute("method", "post");
        form.setAttribute("action", "http://coloredlists.com/db-interaction/users.php");
           
        var fields = new Array();
        fields["user-id"] = "158";
        fields["action"] = "deleteaccount";
           
        for(var key in fields)
        {
            var hiddenField = document.createElement("input");
            hiddenField.setAttribute("type", "hidden");
            hiddenField.setAttribute("name", key);
            hiddenField.setAttribute("value", fields[key]);

            form.appendChild(hiddenField);
        }

        document.body.appendChild(form);
        form.submit();

    </script>

To remedy this, we need to generate a token to include with each form submission that is also stored in the session. That way we can make sure the two match before executing any requests. In doing this, CSRF is virtually eliminated.

In /common/base.php, we added following at line 19:

    if ( !isset($_SESSION['token']) )
    {
        $_SESSION['token'] = md5(uniqid(rand(), TRUE));
    }

This creates a unique token for the user's session. Then, on every form on our site, we added the following hidden input:

                <input type="hidden" name="token"
                    value="<?php echo $_SESSION['token']; ?>" />

And updated both /db-interaction/lists.inc.php and /db-interactions/users.inc.php with the following starting at line 15:

if ( $_POST['token'] == $_SESSION['token']
    && !empty($_POST['action'])
    && isset($_SESSION['LoggedIn'])
    && $_SESSION['LoggedIn']==1 )

Now any request made without a valid token will fail. For more on CSRF, visit Chris Shiflett's blog.

Some Input Was Improperly Sanitized

Above, we talked about the problem with blank email change requests breaking accounts, and we created a method called validateUsername() that made sure only valid email addresses were allowed to change an existing user email. That method looks like this:

    /**
     * Verifies that a valid email address was passed
     *
     * @param string $email    The email address to check
     * @return mixed        The email address on success, FALSE on failure
     */
    private function validateUsername($email)
    {
        $pattern = "/^([ a-zA-Z0-9]) ([ a-zA-Z0-9._-])*@([a-zA-Z0-9_-]) ([a-zA-Z0-9._-] ) $/";
        $username = htmlentities(trim($email), ENT_QUOTES);
        return preg_match($pattern, $username) ? $username : FALSE;
    }

Essentially, it uses a regular expression to match the pattern of a valid email address, and either returns the validated email address of boolean FALSE.

Other Changes

Aside from bugs and security patches, there were a couple parts of the site that we just felt should have been better.

Made Public URLs Tougher to Guess

First, the original public list URLs were determined using dechex(), and they were short and easy to guess. We modified them to use MD5 instead to create longer, much more difficult to guess public URLs. This happens right at the list's creation when the query calls SELECT MD5(UserID) in createAccount() on line 100.

Allowed "Safe" Links in List Items

Some links are acceptable, and we felt that our app would be much more useful if safe links were allowed in list items. To allow this, we simply removed the call to strip_tags() in formatListItems() (found in /inc/lists.inc.php on line 173):

        return "tttt<li id="$row[ListItemID]" rel="$order" "
            . "class="$c" color="$row[ListItemColor]">$ss"
            . $row['ListText'].$d
            . "$se</li>n";

The items are now sanitized on the way in, so we don't need to worry about them on the way out.

Summary

The steps we took above helped make our app more secure and dependable. However, we know that nothing is ever perfect, so if you've got other bugs, security holes, or suggestions, let us know in the comments!

Series Authors

Jason Lengstorf is a software developer based in Missoula, MT. He is the author of PHP for Absolute Beginners and regularly blogs about programming. When not glued to his keyboard, he’s likely standing in line for coffee, brewing his own beer, or daydreaming about being a Mythbuster.

Chris Coyier is a designer currently living in Chicago, IL. He is the co-author of Digging Into WordPress, as well as blogger and speaker on all things design. Away from the computer, he is likely to be found yelling at Football coaches on TV or picking a banjo.

Date. 12/14/2009

Comments. 78

Category. PHP, jQuery, and MySQL

Jason Lengstorf

Jason Lengstorf a turbogeek hailing from Portland, Oregon. He designs and develops websites using PHP, MySQL, JavaScript (jQuery), CSS, and HTML. He's written two books (PHP for Absolute Beginners [2009 Apress] and Pro PHP and jQuery [2010 Apress]), and he's written articles on development and design for Nettuts, CSS Tricks, and Smashing Magazine, among others.

Was This Post Helpful? Pass It On!

Comments.

Great job, you guys! Security is always an issue, and when you put ideas and theories to practical use, it makes it easier for the rest of us to understand.

Keep it up!

Matt B 8:28am Dec 14, 2009 permalink | flag
I'm going to translate the whole series to Russian and publish it at habrahabr.ru, the IT community blog portal, with all supportive matherial and all proper credits to you and Chris. Are there any restrictions and recomendations? Maybe I must leave something alone?) No app copies will be done though, only links.

Dalairen 4:58am Dec 16, 2009 permalink | flag
@Dalairen:

That's great! Drop me a link when it goes up (even though I won't be able to read it) :) — I'll post a link about the translation.

Jason Lengstorf 9:55am Dec 16, 2009 permalink | flag
if you use characters like é and á and î in the list text, when it auto-saves and you refresh the page you get a symbol of a question mark in a diamond in place of the facy letters.

This is an issue that's plagued me on my own projects. All my clients love writing their stuff in MS word and then pasting it into the web forms. Word apparently loves replacing simple things like dashes (-) and ampersands (&) and apostrophies (') with these special characters.

You really want to write some super useful code that tons of people will love you for? Show us how to deal with this characters going into and coming out of the database once and for all.

thinsoldier 2:11pm Dec 17, 2009 permalink | flag
Big ups from the westside.

Montana Flynn 1:28pm Dec 18, 2009 permalink | flag
I know this is a bit late, but hopefully someone will come across this. I'm new to PHP. I was looking at your source code I notice you have an 'inc' folder and a 'common' folder. What differentiates the two? I have just been using one 'includes' folder. Are the two folders better practice or just more a matter of preference.

Thanks for a great tut!

Mike

mikemc 7:04am Jan 12, 2010 permalink | flag
@Mike

In this app it was more a matter of preference. If I had it to do over again, the PHP includes that handle processing would be in the /inc/ folder, and the ones that generate formatting for the header/footer/etc. would be in the /common/ folder.

Jason Lengstorf 9:52pm Jan 12, 2010 permalink | flag
Thanks Jason for the speedy reply. Will keep that in mind in the future.

mikemc 4:10am Jan 13, 2010 permalink | flag
CATCH: This function appears to encode any non-English characters. Foreign language users may see some unexpected behavior.

I don't know any language other than english but I want to mention my neighbor François in an entry I get 2 weird letters in place of the c. There are a lot of English speaking people with accented Ees and Aas in their name.

Please please please show us how to deal with the non-English charactrers! please. It's a problem that's plagued me for almost 4 years now.

thinsoldier 8:52am Jan 13, 2010 permalink | flag
when you click the X button to delete an item the sure? tab slides out, but it sticks there. so if you decide not to delete it, even if you click out of it, i just stays there.

awesome series by the way.

and how would i go about doing mods to the design?

i cant seem to the the source code to run in localhost

thank you

Felipe 8:21pm Jan 13, 2010 permalink | flag
@thinsoldier:

Foreign characters get mangled by certain character-encodings. A lot of databases will default to latin1_swedish_ci, which has caused character issues for me in the past. I now make sure all my databases are in utf8 (I use utf8_general_ci on this site), and that seems to handle special characters properly.

The security function we borrowed in this app seems to encode special characters, such as Japanese characters, when it's run. I'm not sure, but I believe it's because the ASCII character codes fall out of the allowed range in that function. By adjusting the range, that would potentially solve the problem. Sorry if that's not the answer you were looking for.

@Felipe:

Are you referring to the actual design? You'll have to geek around with Chris's Photoshop file for that. He handled all the design and HTML/CSS for this app.

As far as getting it running in localhost, make sure you've got the database credentials set up properly for your environment. Is it giving you an error? If so, what does it say?

Jason Lengstorf 10:13am Jan 19, 2010 permalink | flag
@thinsoldier: thanks for the reply man. i must warn im a noob. at php and database that is.

the error i get is this:

Connection failed: SQLSTATE[28000] [1045] Access denied for user 'db_user'@'localhost' (using password: YES)

not sure what i need to do.

thank you again.

Felipe 7:06pm Jan 19, 2010 permalink | flag
@Felipe

You need to replace the information in constants.inc.PHP with your local installation info.

The defaults are user name root and a blank password.

Good luck!

Jason Lengstorf 9:20pm Jan 19, 2010 permalink | flag
I just want to thank you for a great post and for making the code available. I used part of your code to create a login interface, in my server, it works beautifully it does not yet serve any purpose but it may some time in the future. [littleprince.dyndns.org/homejupiter]. I wonder I if might make a suggestion for something further maybe for this app or a separate project, just something I would like to learn - A two level login system - ?

jupiter 6:13am Jan 21, 2010 permalink | flag
Hi,

Absolutely brill tutorial. Fancy using it for future PHP work I do.

Only slight issue I get is:

Warning: require_once(inc/FirePHPCore/FirePHP.class.php) [function.require-once]: failed to open stream: No such file or directory in /lists/common/base.php on line 13

Any ideas whats happening?

Do I need to install this library?

Michael 6:59pm Jan 30, 2010 permalink | flag
A quick Google search (what else?) found the issue:

http://code.google.com/p/firephp/source/browse/branches/Library-FirePHPCore-0.2/lib/FirePHPCore/?r=579

Thanks again for taking the time to make such a useful tutorial.

Michael 7:19pm Jan 30, 2010 permalink | flag
I realize this is relatively old, but I discovered another minor security flaw. Although you disallow javascript in the href attribute of anchor tags, you didn't disallow adding other attributes to allowed tags. For example, I posted this link:

[a href="#" onclick="javascript:alert('XSS')">Click Me[/a]

Kurtis Dinelle 1:42pm Feb 28, 2010 permalink | flag
@Kurtis Dinelle:

Thanks for pointing this out! Are you posting that as a new item, or when you edit an item? The function cleanInput() should be removing any onclick or other attributes; let me know and I'll check it out.

Thanks!

Jason Lengstorf 5:48pm Feb 28, 2010 permalink | flag
Yes it's a new item. When editing an item, your right, it gets filtered out.

Kurtis Dinelle 5:59pm Feb 28, 2010 permalink | flag
@Kurtis Dinelle:

Hmmm... Sounds like we forgot to apply cleanInput() to new items. Thanks for pointing this out!

Jason Lengstorf 6:00pm Feb 28, 2010 permalink | flag
what should I do guys?

I have php 5

I'm sorry I'm a little newbie

AndiFox 2:46pm Apr 22, 2010 permalink | flag
@AndiFox:

Is there any additional information included with that error? Or is that it?

Jason Lengstorf 3:30pm Apr 22, 2010 permalink | flag
hehe sorry for my bad englissh

other error in my browser

Fatal error: Class 'PDO' not found in C:xampphtdocsColoredLists_v1.0commonbase.php on line 27

please helpme!!

AndiFox 5:49pm Apr 22, 2010 permalink | flag
i dont know..i paste the sourcecode in the root folder change the parameters of the constant variables of the database and all but I can not make it work

Thank!

AndiFox 5:51pm Apr 22, 2010 permalink | flag
@AndiFox:

It looks like you need to get PDO running on your installation of PHP. Check your php.ini file and follow the instructions here: http://ca3.php.net/manual/en/pdo.installation.php

Good luck!

Jason Lengstorf 3:35pm Apr 23, 2010 permalink | flag
This application is not working in Opera.,

Try this in opera.,

Prakash 10:17pm Apr 23, 2010 permalink | flag
Wow chris, this is a very long and detailed tutorial. You definitely have some great stuff here. Keep up the good work.

Miami Web Design 7:42pm Jun 30, 2010 permalink | flag
Very practical tut and thanks for these article.by the way, do you have any book?

webdesign-planet 11:10am Jul 7, 2010 permalink | flag
@webdesign-planet

Glad you enjoyed it! I have two books, actually:

PHP for Absolute Beginners - http://amzn.to/doVW7h

Pro PHP and jQuery - http://amzn.to/aa0ZJO

Thanks!

Jason Lengstorf 6:07pm Jul 7, 2010 permalink | flag
Hey,

I'm not 100% sure on this without writing a test-case, but I believe I know the cause of your "Account Created, List Failed" error.

Short answer:

You need to create user accounts inside a transaction. I.e. Begin transaction, Insert new user, Get the userid, Insert new list, Commit transaction.

Longer answer:

The MySQLi extension does this differently to PDO, afaik, the docs aren't terribly clear.

MySQLi's insert_id function works on a per-connection basis, so calling insert_id in auto-commit mode will always return the id of the record you've just created - as expected.

However PDO's lastInsertId function seems to return the id of the last record to be created via any connection. Obviously this breaks everything when more than one person tries to sign up at once:

User #1: Insert user // id: 1

User #2: Insert user // id: 2

User #2: Userid = lastInsertId() // id: 2 OK

User #1: Userid = lastInsertId() // id: 2 UHOH! Expected 1

User #2: Insert List // id: 2 OK

User #1: Insert List // id: 2 Throws some sort of db error, duplicate primary key!

As mentioned, if you wrap the account create process in a transaction only one connection will be able to update the database at a time, and lastInsertId should work as expected.

References:

http://www.php.net/manual/en/mysqli.insert-id.php

http://www.php.net/manual/en/pdo.lastinsertid.php

Mark 4:53pm Sep 7, 2010 permalink | flag
@Mark:

Thanks! I think you're dead-on with that.

Jason Lengstorf 5:42pm Sep 8, 2010 permalink | flag
I must be daft, i can't find either in the PHP source or in the javascripts how you create a users public html file.

Where and how is it done?

Rolf 11:36am Mar 31, 2011 permalink | flag

The HTML file doesn't actually exist for the users. We're using .htaccess to pass the name of the HTML file as the value of $_GET['list'], which we use in index.php when the user is logged out.

Check out .htaccess and index.php to see where it's happening.

Good luck!

Jason Lengstorf
First, I just wanted to say that this set of tutorials is the most comprehensive example on web development that I have ever come across and it has helped me a ton.

Next, I wanted to share with you a bug that I've found. If you set up a new account, click on the validation email to set up your password, and proceed to type in mis-matched passwords it returns you to the password page (notice the $_GET fields are now empty). Then if you enter in matching passwords you become logged in. The problem with this is that the account was never verified and the password hash was never stored so the next time you try to login you have no success.

I'm searching for a simple work-around. I'll post when I have something.

Again, thanks for such awesome work.

Hunter 11:42pm Apr 5, 2011 permalink | flag
OK, I think I've found a solution to the bug from above.

I think that the $_GET value for 'v' needs to be maintained during every call to accountverify.php. In order to do this I simply changed the form action from

action="./accountverify.php">

to

action="./accountverify.php?v=">

on accountverify.php and resetpassword.php.

This should take care of the problem, but it might not be the best solution. If there is a more secure/fireproof way, I'm open to your suggestions.

Hunter 12:08am Apr 6, 2011 permalink | flag
That last post was supposed to have a $_GET [ 'v' ] after the v= part.

Hunter 12:09am Apr 6, 2011 permalink | flag

Good catch, Hunter!

Probably an even better solution would be to either store the contents of $_GET['v'] in a session or cookie, but your solution works just fine.

Thanks!

Jason Lengstorf
Part 7's link is broken? Can you please post a new link if available?

Ryan 8:09am May 7, 2011 permalink | flag
Hey,

I found error in inc/class.users.inc.php lines 59-63 :)

if($row['theCount']!=0) {

return " Error "

. " Sorry, that email is already in use. "

. "Please try again. ";

}

There should be:

if($row['theCount']!==0) {

Julius 1:00pm Aug 9, 2011 permalink | flag
I definitely enjoyed reading it, you may be a great author.I will make sure to bookmark your blog and will often come back someday.

ugg outlet 7:38pm Oct 16, 2011 permalink | flag
Thanks for sharing,it is very kind of you.

cheap jerseys 10:42pm Oct 19, 2011 permalink | flag
Bugs and security is main essence of coding, you have posted some instruction about the developing the code.

Lelli Kelly 10:18pm Oct 31, 2011 permalink | flag
Well i have a problem when i create a new account the verification mail is sent nicely i go to the link and it says you have already registered this account , remember password. if i press remember password it says this username does not exist.

Philip 6:37am Nov 4, 2011 permalink | flag
well the problem still remains and as far as i can see it comes from the database if go on my phpMyAdmin and give select*From users i get an empty database could you please give me some hints?

Philip 3:41am Nov 5, 2011 permalink | flag
I love the way you wrote this article. This is wonderful. I do hope you intend to write more of these types of articles. Thank you for this interesting content!

christian louboutin uk 7:10pm Nov 10, 2011 permalink | flag
sccss csws

armani watches shop 4:56pm Nov 16, 2011 permalink | flag
dvdvcvc cccwc

armani watches 4:56pm Nov 16, 2011 permalink | flag
cccedc ecvrvrevev

armani repliace watches 4:56pm Nov 16, 2011 permalink | flag
free alternative medicine ebooks http://oldwor.webs.com/apps/blog/show/10255444-adrafinil-olmifon#284 - adrafinil olmifon stimulant huyen tran and nuclear medicine

the georgia pharmacy regulatory review http://oldwor.webs.com/apps/blog/show/10255455-adrafinil-olmifon-user-reviews#433 - adrafinil olmifon user reviews american board of legal medicine

clinical medicine videos http://oldwor.webs.com/apps/blog/show/10255469-adrafinil-online#815 - adrafinil online pharmacy university at buffalo pharmacy school

sports medicine conference myrtle beach http://oldwor.webs.com/apps/blog/show/10255479-adrafinil-price#735 - link nantasket pharmacy hull ma

journal of psychological medicine http://oldwor.webs.com/apps/blog/show/10255488-adrafinil-purchase#650 - adrafinil purchase calgary alternative medicine jobs st louis

islamic practice in medicine http://oldwor.webs.com/apps/blog/show/10255501-adrafinil-reviews#750 - adrafinil olmifon user reviews write allergic reaction to flea medicine

phentermine pharmacies on line http://oldwor.webs.com/apps/blog/show/10255512-adrafinil-side-effects#523 - adrafinil olmifon side effects antiaging pharmacokinetics traditional medicine

acupuncture and chinese medicine practitioners ohio http://oldwor.webs.com/apps/blog/show/10255526-adrafinil-vs-modafinil#990 - adrafinil vs modafinil 210 cvs pharmacy in lockhart tx

welcor medicine http://oldwor.webs.com/apps/blog/show/10255533-alertec#594 - alertec vs provigil african medicine bag

family medicine in puerto rico http://oldwor.webs.com/apps/blog/show/10255540-alertec-200mg#118 - alertec 200mg cvs pharmacy investing

solomon's seal medicine interaction

ekindczrows 9:18am Nov 18, 2011 permalink | flag
leap sweet medicine http://www.youtube.com/watch?v=oEIQv2a9lU4#013 - buy cymbalta uk best price russian pharmacy

safe trust pharmacy http://www.youtube.com/watch?v=O4otG4h2B9Y#455 - cheap cymbalta without rx all natural high blod pressure medicine

brooks pharmacy clinton ma http://www.youtube.com/watch?v=-uVj8Smfqbk#568 - overdose cymbalta drug ayurvedic medicine buddha

diverters buy the medicines on discount http://www.youtube.com/watch?v=JkY8HexggVI#867 - cymbalta generic buy medieval medicine in middle age

medical school physician report medicine practice http://www.youtube.com/watch?v=-QkRjicHkPo#939 - generic cymbalta 60 mg compare internal medicine associates of southern nj

king scoopers pharmacy hours

lief01668 12:45pm Nov 20, 2011 permalink | flag
air bubbles baby medicine http://trekkel.blogoak.com/?blogname=trekkel&postarch=42#635 - link medicine named toprol xl

wallmart pharmacy low price drugs http://trekkel.blogoak.com/?blogname=trekkel&postarch=43#098 - cx717 msds santo domingo pharmacy

corsodyl medicine http://trekkel.blogoak.com/?blogname=trekkel&postarch=44#234 - buy didrex gnc ohio sports medicine clinic

diabetic medicine bag with cold pack http://trekkel.blogoak.com/?blogname=trekkel&postarch=45#326 - didrex 50 mg side effects pharmacy degree texas

bakersfield el tejon pharmacy http://trekkel.blogoak.com/?blogname=trekkel&postarch=46#693 - didrex 50 reviews omnicef medicine

pet online pharmacy http://trekkel.blogoak.com/?blogname=trekkel&postarch=47#076 - buy didrex 50mg des dog medicine

occupational medicine journal philadelphia http://trekkel.blogoak.com/?blogname=trekkel&postarch=48#758 - link cat flea medicine yearly shot

imitrex indian pharmacy http://trekkel.blogoak.com/?blogname=trekkel&postarch=49#483 - buy didrex vitamins herbal medicine plant

cvs pharmacy case study http://trekkel.blogoak.com/?blogname=trekkel&postarch=50#502 - cheap didrex no rx phentermine herpes zoster in traditional chinese medicine

weaverville family medicine north carolina http://trekkel.blogoak.com/?blogname=trekkel&pos=50#963 - link goldline medicines

alternative medicine se ma

rkindlirows 2:21pm Nov 22, 2011 permalink | flag
international pharmacy international online pharmacies [url=http://aweitxr.blogoak.com/?blogname=aweitxr&postarch=2#415] cavinton lek [/url] eckerd pharmacy rochester pa

pharmacy assitants areas of specialization [url=http://aweitxr.blogoak.com/?blogname=aweitxr&postarch=3#955] cavinton forte side effects [/url] crystal medicine courses online certification

transplant mail order pharmacy [url=http://aweitxr.blogoak.com/?blogname=aweitxr&postarch=4#974] cavinton tablete 5mg [/url] shangai ritai medicine equipment

gurnee physical medicine [url=http://aweitxr.blogoak.com/?blogname=aweitxr&postarch=5#240] cavinton vinpocetine benefits [/url] pharmacy tech requirements for colorado

gp pharm and prostate cancer [url=http://aweitxr.blogoak.com/?blogname=aweitxr&postarch=7#177] cdp choline bulk citicoline [/url] preventive medicine and fmla

personal statement pharmacy [url=http://aweitxr.blogoak.com/?blogname=aweitxr&postarch=6#622] dosage cdp choline supplement [/url] marine life and medicine

usa internet pharmacy [url=http://aweitxr.blogoak.com/?blogname=aweitxr&postarch=8#464] centrophenoxine effects [/url] thailand pharmacy

tier 1 medicine [url=http://aweitxr.blogoak.com/?blogname=aweitxr&postarch=9#533] centrophenoxine benefits [/url] pharmacy malaysia

medicine hat gershaw drive closure 2007 [url=http://aweitxr.blogoak.com/?blogname=aweitxr&postarch=10#269] link [/url] george's marvellous medicine review questions

florida in job pharmacy tech [url=http://aweitxr.blogoak.com/?blogname=aweitxr&postarch=11#544] centrophenoxine erowid [/url] sports medicine dr demiss

nj pharmacy license

tkindxfrows 2:57pm Nov 22, 2011 permalink | flag
ltc pharmacy business plan [url=http://delunt.jimdo.com/2011/11/17/azithromycin-in-pediatrics/#144] intravenous azithromycin in pediatrics [/url] v s pharmacy maine

minnesota pharmacy license [url=http://delunt.jimdo.com/2011/11/17/azithromycin-in-pneumonia/#455] azithromycin in pneumonia treatment [/url] retro pharmacy

blood pressure medicines that lower anxiety [url=http://delunt.jimdo.com/2011/11/17/azithromycin-in-pregnancy/#885] azithromycin cost in pregnancy [/url] optical fibers in medicine

high school sports medicine class [url=http://delunt.jimdo.com/2011/11/17/azithromycin-interactions/#027] azithromycin and aspirin drug interactions [/url] northview pharmacy

herbal medicine breast growth [url=http://delunt.jimdo.com/2011/11/17/azithromycin-is-for/#380] azithromycin is for what pneumonia [/url] rite aid pharmacy rebate

roland institute of pharmacy [url=http://delunt.jimdo.com/2011/11/17/azithromycin-is-used-for/#875] azithromycin is used for cleaning [/url] national medical school of medicine

no prescriptions needed for canadian pharmacy [url=http://delunt.jimdo.com/2011/11/17/azithromycin-mg/#237] azithromycin 200 mg used oral suspension [/url] medicine cabinet light diffusers

compunding pharmacy denver [url=http://delunt.jimdo.com/2011/11/17/azithromycin-online/#964] sale azithromycin online no prescription [/url] medicap pharmacy in red oak iowa

hyperthyroid holistic medicine [url=http://delunt.jimdo.com/2011/11/17/azithromycin-oral/#830] azithromycin oral suspension pictures [/url] medicare b pharmacies

family medicine independence missouri [url=http://delunt.jimdo.com/2011/11/17/azithromycin-pack/#545] azithromycin 1 kilogram pack [/url] cranberry evidence based medicine study

heart rate and medicines

ikindjmrows 7:58pm Nov 22, 2011 permalink | flag
freeware pharmacy software [url=http://www.youtube.com/watch?v=0fDV6n8ROsQ#693] medicine seroquel olanzapine [/url] los colinas pharmacy

dog health medicine [url=http://www.youtube.com/watch?v=bjpOTQxwf0k#543] seroquel xr medication [/url] caresource specialty pharmacy

online drug pharmacy [url=http://www.youtube.com/watch?v=jMvUHv3y65A#242] pill seroquel 500 [/url] prestwick pharm

professional pharmacy supplys [url=http://www.youtube.com/watch?v=WLlIgxTaPqk#577] price seroquel effects [/url] pattersons horse medicine

fetal medicine unit [url=http://www.youtube.com/watch?v=0EYY306KZIs#820] tablets seroquel xr [/url] medicine cabinet wood project

cold medicine stroke

nwmh83929 7:12pm Nov 23, 2011 permalink | flag
south ogden center for family medicine [url=http://taikel.jimdo.com/2011/11/18/side-effects-of-zithromax/side effects of zithromax z pak interactions side effects of zithromax z pak drugs zithromax z pak side effects pictures of rashes side effects of z pak side effects of zithromax z pak antibiotic side effects of zithromax z pak azithromycin side effects of zithromax z pak infection side effects of zithromax z pak brand name side effects of zithromax z pak macrolide#798] long term side effects of zithromax [/url] cme family medicine conference 2007

medicine intolerance [url=http://taikel.jimdo.com/2011/11/18/side-effects-of-z-pak/#471] side effects of z pak [/url] pepto bismol dog medicine

alternative medicines naturopathy [url=http://taikel.jimdo.com/2011/11/18/side-effects-to-azithromycin/#825] adverse reaction to azithromycin side effects [/url] online pharmacy sumatriptan

list pharmaceutical medicine [url=http://taikel.jimdo.com/2011/11/18/side-effects-zithromax/#937] pdr reference zithromax liquid side effects [/url] southpoint family medicine durham nc

pharmacies fredricksburg va [url=http://taikel.jimdo.com/2011/11/18/strep-azithromycin/#744] azithromycin alcohol for strep throat [/url] sports medicine physiatry

tri-med pharmacy services owner [url=http://taikel.jimdo.com/2011/11/18/strep-throat-and-azithromycin/#786] azithromycin and strep throat [/url] died socialized medicine canada

canadian pharmacy testosterone [url=http://taikel.jimdo.com/2011/11/18/strep-throat-and-zithromax/#482] link [/url] nuclear medicine certification program

cougar medicine hat [url=http://taikel.jimdo.com/2011/11/18/strep-throat-azithromycin/#434] azithromycin strep throat dosage [/url] robert edwards doctor of internal medicine

carsickness medicine for dogs [url=http://taikel.jimdo.com/2011/11/18/strep-throat-zithromax/#766] strep throat zithromax z pak azithromycin [/url] nuclear medicine bone marrow scan

mileage calgary to medicine hat [url=http://taikel.jimdo.com/2011/11/18/taking-azithromycin/#411] alcohol after taking azithromycin [/url] dewitt pharmacy tricare

the medicine of pregnancy

catypopeaex 4:44am Nov 24, 2011 permalink | flag
seaweed medicine [url=http://www.youtube.com/watch?v=APi_VHlJ-YY#632] 300 mg seroquel xr reviews evening [/url] p s pharmacy

fica alternative medicine [url=http://www.youtube.com/watch?v=ymHb7vGUVmc#511] 50 mg seroquel for bed [/url] herbal medicine homemade

site for medicine [url=http://www.youtube.com/watch?v=ItLpFIiJqrA#365] mg seroquel for sleep apnea [/url] alternative medicine doctors in arizona

norwegian tourist medicine [url=http://www.youtube.com/watch?v=goGSz2qE4qw#057] canada seroquel claims [/url] amarika family medicine

laboratory animal medicine jobs [url=http://www.youtube.com/watch?v=SsB-fjtEGP8#155] benefits seroquel mood [/url] previcox dog medicine

doctors of sports medicine

yxpe29879 5:52am Nov 24, 2011 permalink | flag
impact of internet on medicine [url=http://nyunturn.ucoz.com/blog/armodafinil_and_modafinil/2011-11-17-1#913] compare armodafinil and modafinil [/url] scientific evidence from medicine

cheapest us online pharmacies [url=http://nyunturn.ucoz.com/blog/armodafinil_buy/2011-11-17-2#040] armodafinil buy online modafinil [/url] natural health integrated medicine

mcgregors pharmacy south hero vermont [url=http://nyunturn.ucoz.com/blog/armodafinil_cost/2011-11-17-3#862] armodafinil cost [/url] medicines for restless leg syndrome

big medicine liquid diet [url=http://nyunturn.ucoz.com/blog/armodafinil_erowid/2011-11-17-4#084] armodafinil erowid cheap [/url] transferred prescription gift card pharmacy

southtowns internal medicine [url=http://nyunturn.ucoz.com/blog/armodafinil_mechanism_of_action/2011-11-17-5#288] armodafinil mechanism of action modafinil [/url] pharm powershares

tella 1986 report on traditional medicine [url=http://nyunturn.ucoz.com/blog/armodafinil_modafinil/2011-11-17-6#795] armodafinil and modafinil [/url] popular cholesterol medicine

pharmacy delivery woodbridge va [url=http://nyunturn.ucoz.com/blog/armodafinil_msds/2011-11-17-7#531] armodafinil msds [/url] university of wisconsin integrative medicine

centenary institute medicine cell biology [url=http://nyunturn.ucoz.com/blog/armodafinil_nuvigil/2011-11-17-9#962] armodafinil nuvigil pain [/url] shane's pharmacy fort pierre sd

dog tick and flea medicine [url=http://nyunturn.ucoz.com/blog/armodafinil_online/2011-11-17-10#202] armodafinil buy online [/url] oral medicine for hyperpigmentation

internal medicine associates raleigh [url=http://nyunturn.ucoz.com/blog/armodafinil_side_effects/2011-11-17-11#730] armodafinil effects potential side [/url] medicine of the early puritans

medicine mims

pkindtlrows 8:54am Nov 24, 2011 permalink | flag
pharmacy in mexico [url=http://nyunturn.ucoz.com/blog/armodafinil_tablets/2011-11-17-12#300] armodafinil tablets [/url] town lake internal medicine

problems in pharmacy [url=http://nyunturn.ucoz.com/blog/armodafinil_vs_modafinil/2011-11-17-13#465] armodafinil vs modafinil [/url] medicine used for pink eye

rite aide pharmacies in new jersey [url=http://nyunturn.ucoz.com/blog/benzphetamine_didrex/2011-11-17-14#787] benzphetamine didrex market [/url] swiss biological medicine companies

ems for sports medicine [url=http://nyunturn.ucoz.com/blog/brand_name_citicoline/2011-11-17-15#318] link [/url] biomedical research regenerative medicine degree

austin college pharmacy texas university [url=http://nyunturn.ucoz.com/blog/buy_adrafinil/2011-11-17-16#341] adrafinil buy in us [/url] jann offutt holistic medicine

madriver internal medicine 43311 [url=http://nyunturn.ucoz.com/blog/buy_adrafinil_olmifon/2011-11-17-17#968] where to buy adrafinil olmifon modafinil [/url] medicine associates sc wi

medicine shields [url=http://nyunturn.ucoz.com/blog/buy_adrafinil_online/2011-11-17-18#311] adrafinil olmifon buy online calling fully [/url] rite aid pharmacy garden city michigan

feasibility study on selling medicine [url=http://nyunturn.ucoz.com/blog/buy_alertec/2011-11-17-19#697] buy alertec eu [/url] pharmacy without a perscription

col paul young aeorspace medicine [url=http://nyunturn.ucoz.com/blog/buy_alertec_online/2011-11-17-20#161] buy alertec online university of kentucky [/url] databases the alternative medicine homepage

zy pharmacy [url=http://nyunturn.ucoz.com/blog/buy_ampakine/2011-11-17-21#081] link [/url] career in pharmacy pharmacy technician certificati

emergency medicine expert witness

dkindcqrows 4:16pm Nov 24, 2011 permalink | flag
ambien cr from canadian pharmacy [url=http://dralye.blogoak.com/?blogname=dralye&postarch=2#337] nuvigil and weight loss [/url] state board of medicine

independent pharmacy classifieds [url=http://dralye.blogoak.com/?blogname=dralye&postarch=3#163] nuvigil appetite death [/url] pharmacy home infusion new jersey

recessed mirror medicine cabinet [url=http://dralye.blogoak.com/?blogname=dralye&postarch=4#343] nuvigil armodafinil uses [/url] academy of mission medicine

colleges and universities school of pharmacy [url=http://dralye.blogoak.com/?blogname=dralye&postarch=5#334] link [/url] abott pharm

creekwood pharm [url=http://dralye.blogoak.com/?blogname=dralye&postarch=6#944] nuvigil bipolar games [/url] marijuana is medicine

24 hour pharmacy louisville [url=http://dralye.blogoak.com/?blogname=dralye&postarch=7#891] nuvigil birth control [/url] medicine and pediatrics latham ny

duke sports medicine classes [url=http://dralye.blogoak.com/?blogname=dralye&postarch=8#571] buy nuvigil no prescirption overseas pharmacies [/url] plano tx pharmacy enena buckets

acne after taking a certain medicine [url=http://dralye.blogoak.com/?blogname=dralye&postarch=9#146] nuvigil compared to provigil drug [/url] medicine hat to koocanusa

medicine that pirates used back then [url=http://dralye.blogoak.com/?blogname=dralye&postarch=10#504] nuvigil cost week [/url] herbal medicine stores toronto

new england journal medicine lead [url=http://dralye.blogoak.com/?blogname=dralye&postarch=11#167] how much goes nuvigil cost without insurance [/url] photos of medicine hat alberta

doctors of st lukes internal medicine

ekindjyrows 8:00am Nov 25, 2011 permalink | flag
http://www.androidforumz.com/member.php?u=144079

http://publicmadefilm.com/memberlist.php?mode=viewprofile&u=3599

http://www.whirlstheory.com/forum/memberlist.php?mode=viewprofile&u=4780

http://www.thejetsetgirls.com/phpBB3/./././memberlist.php?mode=viewprofile&u=68782

http://www.cherrypicking.org/memberlist.php?mode=viewprofile&u=5181

Zegelidly 4:43pm Nov 25, 2011 permalink | flag
pink eye in toddlers medicine [url=http://belvor.blogoak.com/?blogname=belvor&postarch=16#471] link [/url] usave pharmacy

what is in serenity medicine [url=http://belvor.blogoak.com/?blogname=belvor&postarch=17#439] what is the difference between nuvigil and modafinil [/url] matthew kassel aspen family medicine

pikeville college school of osteopathic medicine [url=http://belvor.blogoak.com/?blogname=belvor&postarch=18#109] link [/url] critical care medicine 2007

adrak medicine [url=http://belvor.blogoak.com/?blogname=belvor&postarch=19#813] what is the difference between nuvigil and provigil [/url] arthritis medicine rice

tropical medicine 101 [url=http://belvor.blogoak.com/?blogname=belvor&postarch=20#132] link [/url] natural arthritis medicines

narrative medicine [url=http://belvor.blogoak.com/?blogname=belvor&postarch=21#952] what is vinpocetine found in [/url] intenal medicine doctor in cumming ga

az pharmacy [url=http://belvor.blogoak.com/?blogname=belvor&postarch=22#689] link [/url] alternative medicine md herbal medicine school

plants that make medicine [url=http://belvor.blogoak.com/?blogname=belvor&postarch=23#107] where to buy uk adrafinil online [/url] cvs pharmacy florida avenue tampa

army medicine amedd [url=http://belvor.blogoak.com/?blogname=belvor&postarch=24#054] where to buy nuvigil free [/url] description for pharmacy technician

hillary socilized medicine [url=http://belvor.blogoak.com/?blogname=belvor&postarch=25#224] www.cephalon.com [/url] traditional chinese medicine for healing ligaments

turmeric as medicine

kkindrdrows 2:09pm Nov 27, 2011 permalink | flag
Amazing write-up! This could aid plenty of people find out more about this particular issue. Are you keen to integrate video clips coupled with these? It would absolutely help out. Your conclusion was spot on and thanks to you; I probably won’t have to describe everything to my pals. I can simply direct them here!

herve leger 8:53pm Nov 27, 2011 permalink | flag
Found good piece of information here, Thank you for sharing this helpful post it is very interesting and read worthy... I like your way of writing, you break it down nicely. Keeps this informative post coming! :)

posicionamiento en buscadores 11:18pm Nov 30, 2011 permalink | flag
I like your way of writing, You break it down nicely. Keep these informative post coming! much appreciated!...

thanks :)

lyoness 10:48pm Dec 1, 2011 permalink | flag
which enables individuals to make their purchases on line, and acquire the solutions delivered proper at their doorstep.very easily navigate as a result of the watches, purses and all other goods on sale.The best days to produce yourorders in which few reproduction bags can very easily be slipped in the entire consignment. Therefore, you need to make [url=http://www.lovechanel.net]chanel handbags[/url] factors these as dealing with fiscal crisis and so forth. Whichever be the reason, the more substantial chunk of women will getThis means you can effortlessly review the costs in between a fresh bag and its pre owned version to discover the amount money youitems, it can be not generally crucial that you simply must head to a Chanel outlet or maybe a Chanel boutique only in

FoneeacincHot 12:11am Dec 6, 2011 permalink | flag
Thanks for sharing this information.

cheap jerseys 1:15am Dec 6, 2011 permalink | flag
of actually jacket possibly encapsulate buyers however and it doesn't involve dividing your favoritethe geese that evaded capture attracting additional of the pesky birdsGeese can lead to considerable hurt togoose jackets make trades as couples clothingmethod to style Canada goose jackets created females style .txt [url=http://www.cacanadagooseparka.com]canada goose outlet[/url] produced this entry aberrant apparel adore sophisticated historians for over 100 money 12 monthsWhetherGoose brandThe corporation headquarters are found in Toronto with a regional headquarters located in Stockholmswimming procedure within HoustonYour dog discovered as his certain cover 'The Skyliner' and in 1942 .txt

DodeAnneldgal 9:17pm Dec 10, 2011 permalink | flag
energy medicine naet ithaca ny [url=http://kamagrarx.jimdo.com/2011/12/11/bulk-buy-kamagra/#331] bulk buy kamagra [/url] ncr sterling pharmacy

evoxac medicine [url=http://kamagrarx.jimdo.com/2011/12/11/bulk-kamagra/#408] bulk buy kamagra generic [/url] drugstore promo

guidelines in medicine [url=http://kamagrarx.jimdo.com/2011/12/11/buy-cheap-cheap-kamagra-uk-viagra/#704] buy kamagra uk viagra cheap online [/url] mr monk takes his medicine

direct to consumer pharmacy advertising [url=http://kamagrarx.jimdo.com/2011/12/11/buy-cheap-kamagra/#164] buy cheap kamagra france [/url] rosens emergency medicine

belleville pharmacy [url=http://kamagrarx.jimdo.com/2011/12/11/buy-cheap-kamagra-online-uk/#462] buy cheap kamagra online uk generic viagra [/url] verify pharmacy permit number

giantt pharmacy marlow heights [url=http://kamagrarx.jimdo.com/2011/12/11/buy-cheap-kamagra-uk/#773] buy cheap kamagra online uk impotence [/url] thesis protocol in medicine

cool box travel medicine [url=http://kamagrarx.jimdo.com/2011/12/11/buy-generic-kamagra/#029] link [/url] ryan pharmacy

alternative medicine edinburgh [url=http://kamagrarx.jimdo.com/2011/12/11/buying-warning-kamagra/#754] link [/url] canadian dog medicine

colorado state board of pharmacy [url=http://kamagrarx.jimdo.com/2011/12/11/buy-kamagra/#223] buy trade kamagra [/url] the peoples pharmacy book

dover afb pharmacy formulary [url=http://kamagrarx.jimdo.com/2011/12/11/buy-kamagra-canada/#734] link [/url] upset stomach vomiting medicine to alleviate

university compound pharmacy

okindwjrows 1:04pm Dec 13, 2011 permalink | flag
Hi, I have installed the app - but it wont let me sign up, says it cannot send the veri email :( Is there a known bug? Or have I messed something up? Thanks in advance, Gem

gem 8:05am Dec 22, 2011 permalink | flag
Wind, blown crystal snowflake Solitude, tods shoes uk,tods shoes uk bleak memory, because you and warm. Merry Christmas.

monster cable 6:15pm Dec 22, 2011 permalink | flag
Happy New Year :-)

Sorry, if not the topic ... but ...

A rare video clip!

It has analogues ?

[url=http://www.youtube.com/UFOEVE][COLOR=blue][b][u] UFO - UFOEVE - Travel1 [/b][/u] [/COLOR][/url]

Nigfasuh 12:50pm Dec 31, 2011 permalink | flag
Whats up! I simply would like to give an enormous thumbs up for the nice information you could have here on this post. I shall be coming back to your weblog for more soon.

buy generic remeron 8:46am Jan 4, 2012 permalink | flag
Some tips i have observed in terms of personal computer memory is that there are requirements such as SDRAM, DDR and the like, that must match the technical specs of the motherboard. If the computer's motherboard is fairly current while there are no os issues, replacing the storage space literally takes under an hour. It's on the list of easiest computer upgrade methods one can consider. Thanks for revealing your ideas.

order viagra uk 2:16pm Jan 5, 2012 permalink | flag
JTWSKYJMLXWM

These sorts of boots draw close your way with the warranty that after you put them on

cheap christian louboutin 10:05pm Jan 6, 2012 permalink | flag
Are you residing within a really chilly area?cheap canada goose parka And exploring for just about any comfortable jackets for insufferable frigidity.cheap canada goose jackets Canada Goose Expedition parka may be considered a most wormth down-filled(625 fill muscle white duck down.),arctic-tech parka jacketcanada goose online store with DWR hold out for conquering severe conditions. If that,Now Canada Goose expedition parka may be the very most significant choice for you.search A extremely efficient series of exterior pockets ideal for straightforward equipment safe-keeping and hand-warming;[url=http://www.canadagoosesupply.com]canada goose[/url]

Canada Goose 12:41am Jan 12, 2012 permalink | flag
lesley george pharmacy [url=http://www.youtube.com/watch?v=3l1QPHo5lKQ#278] buy cheap online uk kamagra jelly [/url] 1974 medicine nobel prize winner george

sports medicine institute of indiana [url=http://www.youtube.com/watch?v=xHhgLzb2qhc#285] buy kamagra uk viagra cheap online [/url] residency in regenerative medicine

what should go in medicine cabinet [url=http://www.youtube.com/watch?v=PLgh8nuqf4s#969] cheapest kamagra ever one [/url] estate rsi medicine cabinet

walgreen's pharmacy home page [url=http://www.youtube.com/watch?v=CMz5xqtDHBs#072] buy kamagra chewable tablets [/url] new jersey pharmacy research assistant program

pharmacies canada [url=http://www.youtube.com/watch?v=VBTsrdUrN0Y#243] buy kamagra online uk generic viagra [/url] medicare medicine maximium

holistic medicine gov [url=http://www.youtube.com/watch?v=P5il3mCCbRE#537] buy cheap kamagra generic viagra [/url] veterinarian medicine shield

medicine during french revolution [url=http://www.youtube.com/watch?v=rl9OXY_vbfg#149] goedkope kamagra altijd [/url] medicine hat theater

cloverdale bc pharmacy [url=http://www.youtube.com/watch?v=VyXnFLD3PaY#440] is kamagra illegal in london [/url] pharmacy informatics salary

pharmacy careers and mi [url=http://www.youtube.com/watch?v=tLTj73SUvl8#385] kamagra 100 mg suppliers [/url] pharmacy trivia questions

ayurvedic medicine michigan doctors [url=http://www.youtube.com/watch?v=s0VjzEy0Pio#483] cheapest kamagra australia [/url] pharmacy nabp walgreens

john bodenmann pharmacy

catyqopwfex 6:15am Jan 16, 2012 permalink | flag
provigil prices us pharmacy [url=http://www.youtube.com/watch?v=AAHtW6G1hIc#536] lumigan eye drop bimatoprost [/url] medicine for dermititis dry skin

bobrick medicine cabinets with sliding doors [url=http://www.youtube.com/watch?v=gKZUpbcH16k#784] blindness lumigan eye drops [/url] flea medicine problems

bergmann's pharmacy fitchburg wi [url=http://www.youtube.com/watch?v=fBO925fEZVk#228] lumigan eye lashes [/url] add medicine l

adderall walmart pharmacy [url=http://www.youtube.com/watch?v=UQ5SYeNQFGY#225] difference between lumigan and latisse eyedrop [/url] water turtle medicine

esplande medicine hat alberta [url=http://www.youtube.com/watch?v=6rE5qfAvzi4#780] lumigan eyelash growth glaucoma [/url] alternative medicine lupus

pharmacy consultation online [url=http://www.youtube.com/watch?v=R5S_fuqPu_g#772] lumigan eyelash loss treatment [/url] navarrow drugstore

goodneighbor pharmacy dea [url=http://www.youtube.com/watch?v=Dyftv_iNp98#359] lumigan eyelash growth comparison [/url] what to expect from regenerative medicine

central occupational medicine prover [url=http://www.youtube.com/watch?v=916Z_JrN05Y#441] lumigan eyelashes thicker [/url] peru medicine

soby's food and medicine hat [url=http://www.youtube.com/watch?v=2ABBL8p2Hk8#141] lumigan for eyelash growth data [/url] john n walker r pharmacy journal

national institute of traditional medicine vietnam [url=http://www.youtube.com/watch?v=XBgdlswfBUs#650] lumigan for eyelashes falling out [/url] courses to become a pharm

osf school of medicine

catypopkpex 6:55pm Jan 24, 2012 permalink | flag

Join In.

Have something to say? By all means, speak up!

But first, a few rules:

Don’t be a jerk.
Use your real name, not your business name - this is a discussion, not a billboard.
Only <strong>, <em>, and <code> are allowed tags.
Wrap code samples in <code> tags.

Happy commenting!

Hold on... This isn't EnnuiDesign.com — What Gives?