Project Detail

Description

Hello,

We just transferred our site to a new server and have the following issues:

1.) we have a script that we use to scan in mp3 files from zip files on a server. Since we did the server shift this script scans each mp3 file 3 times in stead of one so instead of having:

1. Neighbors Know My Name.mp3
2. Somethin.mpe

we have:

1. Neighbors Know My Name.mp3
2. Neighbors Know My Name.mp3
3. Neighbors Know My Name.mp3
4. Somethin.mp3
5. Somethin.mp3
6. Somethin.mp3
------

2. On each album page, we allow users to listen to certain songs which looks like:

details.php?id=3863&queryWhere=id&id_song=10

But in our log files it shows that some computer or hacker is trying to send the following URL after details.php?id=.... such as:

/details.php?id=http://xxxxxxx.xxxxx.com/gue.txt???

We need you to create a solution to prevent this from happening the songs should ONLY be called like this:

details.php?id=3863&queryWhere=id&id_song=10

In the above format only.

We will send you the website URL after we receive PMs from applicable programmers. Let us know how you can solve both problems and what your php/mysql experience is like.

Webwurks