One of my web hosting customers has two sites using the "
Million Dollar Script", a fairly new fad in online advertising which allows web publishers to sell ad space on a per pixel basis. Personally, I think this is a retarded fad that will burn out when the buyers realize that the only person getting rich is the software developer. However, I created this blog to review php software, not the application of software on the web.
The first problem is that the programmer failed to use as little mysql queries as possible, which causes your server to work harder than it really needs to.
The second problem is that the programmer is using outdated server variables instead of just using POST, REQUEST, or GET. This causes data to not be passed correctly from script to script on servers running php4 or php5. The problem is a biggie, because users cannot register or login on php4+ servers running with register_globals off.
The next problem is not really a problem, but an annoyance. The software has the html code embedded in the code. Come on, was it too much trouble to use a light weight templating system so that your users would be able to template the software precisely to their needs?
Now the kicker. Hackers will find that hacking this system will be simple, thanks to the fact that this programmer knew nothing of validating user submitted data. So, expect sql injections and the like... as well as some issues due to register_globals needing to be on.
I told the programmer of the many notices and warnings that php outputted upon running the software. Instead of debugging, he stated that he expects users to set error reporting to E_ERROR. Ok, that is lazy. FYI, those notices and warnings are there for a reason. They usually mean that values are not going to be passed from page to page properly.
I rate this software a 3/10 for lack of security, templatability, and purpose. Really, what good is purchasing a couple of pixels on a page that Google will see as crap?