Website Phishing Alert Error

[Herbert]

@DevHolic

$sql = “INSERT INTO accounts (id, pwd, salt, email, phone) VALUES (?, ?, ?, ?, ?)”;
$stmt = $conn->prepare($sql);
$stmt->bind_param(“ssss”, $id, $hpwd, $salt, $email, “None”);

you can’t use bind_param like that.

The correct number of placeholders in the SQL query and the corresponding bindings in bind_param must match…
$stmt->bind_param("sssss", $id, $hpwd, $salt, $email, $phone);

You should use $phone in your bind_param it should solve the issue

or you cloud use like this

$stmt->bind_param("ssss", $id, $hpwd, $salt, $email);

[DevHolic]

This will be my last post because it’s already over 10 posts. The register.php issue has been solved but I still have index.php issue. So I will post the things later to keep the guideline Thank you for helping me again. I am very happy for that. Once again and lastly thank you very much.

[Razu_the_cat]

I mean I had the system not allowing me to post more than 10 in my first day. If it doesn’t show up for you you can continue

[Greenreader9]

@Herbert

This could happen with Chrome if you are using PHP to get visitors IP addresses

No, that’s not possible, nor does it make sense. Google Chrome is a browser, and it has absolutely no way of knowing if you are pulling the IP address with PHP.

Chrome flags websites based on their content, and potentially based on domain name itself, nothing more.

What you should do is add your domain name to the Google Search Console, and respond to the alert that should appear there.

Also, PHP variable names, and a domains registrar won’t impact the message you are getting at all

@DevHolic - Also, you have permission to post for then 10x a day now.

[Herbert]

What I said was very possible; it occurred to me a few years ago. The main reason for this is the presence of malicious code on the website. I just gave him an idea!

@Greenreader9

@Herbert

This could happen with Chrome if you are using PHP to get visitors IP addresses

Why is my site labeled as dangerous in Google Search? - Search Console Help

[Greenreader9]

Yeah, but that malicious code has to send something to the browser. Google has no way of knowing what is happing in the server with PHP. PHP code cannot trigger this, only the output can.

[Herbert]

True, I should’ve been more specific when I said that getting IP addresses from users could do this. And this is what I meant. Let’s assume you have a website that stores user data (IP,location) inside a file (text or something else), and you are using Ajax to send a get request to that php file. When Ajax calls that PHP file, it’s going to write the gathered information to that file on the server. In this case, Google will flag your site as malicious. TRUST ME, I’VE TESTED IT BEFORE! This will happen if you use poor structure in the code.

[Greenreader9]

Yeah, that could happen if you use a publicly accessible file to that personal. Google flagged you correctly there, you should NOT be doing that. Location/IP information needs to be stored in a database, and probably should even be encrypted within that database. It certainly should not be public information, that’s horrible!

[Herbert]

true, it’s was a testing site lol. And I KNOW that.

[DevHolic]

Thank you for helping me! I solved this issues.
I asked to review my website to google search console and it solved.
Thank you very much.