What do computer science engineers do?

[pbuk]

That's what I think I'm doing.

Yes, it looks like it.

I tried the PHP recommended way of just calling "session_start()" at the start of each page, but that didn't seem to work,

session_start must be called before any output is sent. It seems like you are unintentionally sending multiple byte order marks (and should not be sending any - they are invalid in XHTML and unnecessary in plain HTML) as well as comment tags before the DOCTYPE declaration.

Do yourself a favour and switch to HTML 5.

so now I'm handling the session manually.

Are you sure - I can still see that PHPSESSID cookie?

I still need to encrypt stuff

What stuff do you need to encrypt?

and use htmlspecialchars correctly.

Use a template engine like Twigg to avoid unescaped HTML.

I'm probably open for an SQL injection attack.

Use PDO prepared statements (or a database abstraction library like ADODb) to avoid this.

So if you have any more papers I'd love if you provide me with links.

No papers needed, this stuff is just PHP 101.

 

[sbrothy]

Yeah, I'm new to PHP. I've used Perl before but mostly Apache (or Tomcat) and WebSphere App Server with Java. And C# and the whole Windows methodology. I appreciate your (relentless ) advice.

EDIT: I meant JSP and JavaBeans.

 

[sbrothy]

What I want to encrypt are the users passwords when I get registration going. BTW, you can't judge from my GIT link. It's hopelessly outdated. But yeah, I'm a noob here. Again I appreciate your input. No matter how hard the tone. I just have to swallow my pride.

EDIT: Oh sorry. I already said that about the version control.

 

[sbrothy]

i work on a project where i build a app for my gymnasium in our college and my role is frontend dev and i have a teammate. we do code in flutter. sometimes i have some important classes and i will go to attend it in that time he will push something in my branch and call it a update. he will change so many files like i am hit with almost 100 of merge confict. by that i can confirm it is not fun working with someone. but the ui part it still fun working with ui. you just draw and design no complications unlike the backend engineer who will freak out how how they conna worute logic how they gonna design table.

He/She should at least check files in with informational comments and leave comments in the code. If he/she doen't it's bad discipline.