Finally I was trying to Hav your say because it will count alot in my life. please i understand that your time is precious i have reviewed many site here  and other forums even the ones i saw on google adwards. one problem with many of our Nigerian site is that we do half baked business. its always incomplete or even when we used cms or other script we just make it pronouce not even with a customization. i took my time to develop this web site ad i will be happy if you can score me
its an African youth Network but not what you think just rate there is also room for advise and may criticism

Here is the URL
http://www.afripals.com

I will be Glad to answer or reply to your views.
thanks
One Love

I like ur site a gud idea indeed.i will visit it more often nd introduce my friends.but i think there should be proper management to check things that are upload to make it free from virus .so it will nt turn out to other sites of it kind.and i also believe u can do more work to arrange ur softwares and applications in categories as games,themes etc for easy browsing well done.

what the f.u.ck is dashpage.php ? why not just call it splashpage ? Well, dont mind me, i was just a bit put off by that. . .

Please avoid - http://www.afripals.com/style/ - bots and hackers and everyone can read all your folders.

Well, http://www.afripals.com/theme/index.php - not compulsory, but there is a way to prevent that

http://www.afripals.com/img2/ - browsable - a simple .htaccess will prevent this
http://www.afripals.com/css/
http://www.afripals.com/img/
http://www.afripals.com/images/


Please don't copy/paste direct download link of the file. - you can enforce this with php code - using the HTTP_REFERER stuff


That error message - http://download.afripals.com/file.php?id='303 - sounds rather crazy - The file was deleted for breaking our terms of service
http://download.afripals.com/file.php

It might be more user-friendly if you extend your registration like mine - www..net - to allow facebook at least

That your registration form, the error messages are confused. .and not too professional - i dont know how else to put it

For your registration form, you should make it such that the captcha refreshes after each failed attempt. If not, someone that made a correction and correctly filled the
captcha will not be able to register still. . .will get a captcha failed.

On the white sites where i have seen them use recaptcha with ajax, it refreshes each time a validation is made, but on naija ajax sites, this same problem is usually there

And that your registration is too long self.



O yeah if you want to thank me latter or to be my friend just add me when you are ready my profile user name is afrirobort… am not a robot oops! Yeah I am an intelligent one

I promise not to waste your time because Me too I will be helping a lot of people so I got no time to waste!!!

- Me thinks you should work on the grammar of your site. And how come after registering i was not taken to a post registration page?

I was taken to this page after registration - http://www.afripals.com/signup/
Maybe it is my immagination, but it would appear the post-registration page can be viewed without even signing up - that is a big programming error.


I will stop here. . . .so far, i am far from being impressed with the programming work. . . .i have noted multiple possibilities of hacking this site - but i am not testing them, i am just testing your PHP expertise. . . .

The site mind you is a great site, nice contents, nice arrangements and all that. But i think you need a content-writer, and improve on the programming work.

@DHTML I am Very Happy and Grateful to Hear This from you. honestly i Appreciate your Review and i will work on it Now

You are most welcome. And congratulations on being able to do so much with direct coding. Keep up the good work amigo. If you need any extra help with scripting anything or if you have completed the fixes, please let me know.

Dhtml I can see you are very advance in Scripting. that would be great if we work together honestly its been a very tidous job for me. developing and modifying and proof reading. i did all these all by myself even i had to modify some script
I was Integrating Wordpress into the site for business Development
http://developers.afripals.com
and i was also creating a discussion section using a forum script http://talk.afripals.com all these i would love to see people whom i can work with and make Afripals a success. one of my major issues on Chinese Bots and Hackers they have tried many times to pull down the Download sections by even uploading backdoors but i saw the flaw and fixed it in Afripals they are up again trying to spam around so this is another challenge i am having meanwhile i am adding automatic baning in my htaccess so any bot that ends up in disallow scenario will be ban

Directory Listing Disabled (one fixed)

he he, 2012 is off to a big slam and so far, dhtml looks to capture the 2012 poster of the year award 

georgen2u:

Directory Listing Disabled (one fixed)

Keep it up bro. . .

yawa-ti-de:

he he, 2012 is off to a big slam and so far, dhtml looks to capture the 2012 poster of the year award 

I seriously doubt that happening. . . i will have committed a more grievious offense than before. . . .

georgen2u:

Dhtml I can see you are very advance in Scripting. that would be great if we work together honestly its been a very tidous job for me. developing and modifying and proof reading. i did all these all by myself even i had to modify some script
I was Integrating Wordpress into the site for business Development
http://developers.afripals.com
and i was also creating a discussion section using a forum script http://talk.afripals.com all these i would love to see people whom i can work with and make Afripals a success. one of my major issues on Chinese Bots and Hackers they have tried many times to pull down the Download sections by even uploading backdoors but i saw the flaw and fixed it in Afripals they are up again trying to spam around so this is another challenge i am having meanwhile i am adding automatic baning in my htaccess so any bot that ends up in disallow scenario will be ban

Well, you need to study the loopholes and block them. Use recaptcha where you can, but over time, i have developed some evasive methods of confusing the spam bots, that is why they have been finding it very tough to spam my website - but i have never really documented this anywhere on internet - let them figure it out, by then i will have developed better methods. I am constantly reviewing my spam policies from time to time. . .

As for helping you out, that is a bit difficult for me, because i am being spammed with so many small jobs at the moment. . . .

Does anyone see the typo in the heading on the following page, or abi na d garri wey I jus smoke? http://developers.afripals.com/view/blog/

yawa-ti-de:

Does anyone see the typo in the heading on the following page, or abi na d garri wey I jus smoke? http://developers.afripals.com/view/blog/

That was an old post and i am working on it. besides i never wanted it to be empty. do you know what it meant to be coding and being grammarian at the same time? no time my brother i will have to hire experts in grammer

*dhtml:

Keep it up bro. . .
I seriously doubt that happening. . . i will have committed a more grievious offense than before. . . .

for the Spaming issue i am adding a script that will automatically Blacklist them here


<html>
    <head><title> </title></head>
    <body>
    <p>There is nothing here to see. So what are you doing here ?</p>
    <p><a href="http://www.afripals.com/">Go home.</a></p>
    <?php
      /* whitelist: end processing end exit */
      if (preg_match("/10\.22\.33\.44/",$_SERVER['REMOTE_ADDR'])) { exit; }
      if (preg_match("Super Tool",$_SERVER['HTTP_USER_AGENT'])) { exit; }
      /* end of whitelist */
      $badbot = 0;
      /* scan the blacklist.dat file for addresses of SPAM robots
         to prevent filling it up with duplicates */
      $filename = ", /blacklist.dat";
      $fp = fopen($filename, "r" or die ("Error opening file ,  <br>\n";
      while ($line = fgets($fp,255)) {
        $u = explode(" ",$line);
        $u0 = $u[0];
        if (preg_match("/$u0/",$_SERVER['REMOTE_ADDR'])) {$badbot++;}
      }
      fclose($fp);
      if ($badbot == 0) { /* we just see a new bad bot not yet listed ! */
      /* send a mail to hostmaster */
        $tmestamp = time();
        $datum = date("Y-m-d (D) H:i:s",$tmestamp);
        $from = "badbot-watch@afripals.com";
        $to = "hostmaster@afripals.com";
        $subject = "domain-tld alert: bad robot";
        $msg = "A bad robot hit $_SERVER['REQUEST_URI'] $datum \n";
        $msg .= "address is $_SERVER['REMOTE_ADDR'], agent is $_SERVER['HTTP_USER_AGENT']\n";
        mail($to, $subject, $msg, "From: $from";
      /* append bad bot address data to blacklist log file: */
        $fp = fopen($filename,'a+');
        fwrite($fp,"$_SERVER['REMOTE_ADDR'] - - [$datum] \"$_SERVER['REQUEST_METHOD'] $_SERVER['REQUEST_URI'] $_SERVER['SERVER_PROTOCOL']\" $_SERVER['HTTP_REFERER'] $_SERVER['HTTP_USER_AGENT']\n";
        fclose($fp);
      }
    ?>
    </body>
    </html>

Rather than coding all those, why not look at - http://www.projecthoneypot.org/ - and avoid duplicating efforts?? and also take a look at - http://bad-behavior.ioerror.us/

Thank you so much

You are most welcome friend. Please send me an email on support @ . net - i believe i can make use of your assistance.

Thank you. i have also updated the Home page
http://www.afripals.com

where is that my critic that said i did typo error i have added more interesting news for him via http://developers.afripals.com/view/blog

all the same DHTML thanks for your time

u are most welcome, i am still waiting for your contact

I am Contacting you now. Via Support at afripals.com

I did not receive anything, i contacted you via - http://developers.afripals.com/contact-us/
That stuff is nice, but you need more work on it.
You must prevent flooding attack - either use captcha, or at least make the page go to another confirmatory page that says you message has been sent, i can keep on clicking submit and boming your email na?

Responded Sorry for the delay

@DHTML What Can you say about Afripals Opening a Forum for Discussion I.E AfriTalk via http://talk.afripals.com
i had to close it due to spaming. but will it be effective?

*dhtml:

I did not receive anything, i contacted you via - http://developers.afripals.com/contact-us/
That stuff is nice, but you need more work on it.
You must prevent flooding attack - either use captcha, or at least make the page go to another confirmatory page that says you message has been sent, i can keep on clicking submit and boming your email na?

I have Fixed it. Now Recaptcha and good interface

There are many techniques for keeping spam off your forum, you should research and learn them.

DHTML How do we get along? I am thinking if there is anyway we can be assisting each other. i guess you are always busy , any Idea? ad what can you say about the forms?

You are correct. Let's talk on chat, my yim is dhtmlplus

thanks got it. will add it now