web site test needed and technical advice needed.

[User]

 

[gavroche]

All that technical stuff is far too complicated for my old brain. Good luck with it anyway.

 

[jefmcg]

Just uploaded a couple of kml files I downloaded from my rides. Doesn't seem to work. The map was right region, but no points or routes appeared.

one attached below, for your experimentation.

 

[Tin Pot]

Use procedures or parameterised queries.

Never build your sql dynamically.

Always validate your inputs.

If you take that advice you'll be a better coder than most "professionals".

 

[PpPete]

KML files? Why?
There are already free editors that use the industry standard interchange file format (gpx) to plan and display routes on a choice of Ordance Survey, OSM, OCM, GMaps, Satellite view, Street view.
The owner & writer of the one I happen to use was formerly a member on here, took himself a bit seriously, mind.

 

[BrynCP]

Use procedures or parameterised queries.

Never build your sql dynamically.

Always validate your inputs.

If you take that advice you'll be a better coder than most "professionals".

Exactly this!

I am a professional, and I see lots of tutorials, and commercial software, that don't abide by the above creating security holes. Always beware of tutorials and sample code skipping on the security to "make it simpler", it's a fundamental principle.

 

[ColinJ]

The validating inputs thing is quite straightforward ... You could be expecting to read in data in a particular format but if some evil scrote who knows what (s)he is doing crafts some malicious php and feeds you that, you end up executing their code rather than yours instead! READ THIS.