Looks very, very familiar. You know what's scarier? The guys writing Wordpress don't know the difference between a float and an integer either. I warned them three times over two years about a serious security hole. Even though I explained it, they couldn't see it. Only after tens of thousands of sites were hacked could they understand that just because the script expects valid input doesn't mean it's going to GET valid input.
__________________
For historical display only. This information is not current:
support@bettercgi.com ICQ 7208627
Strongbox - The next generation in site security
Throttlebox - The next generation in bandwidth control
Clonebox - Backup and disaster recovery on steroids
|