GoFuckYourself.com - Adult Webmaster Forum - View Single Post

Dynamix · 11-29-2004, 03:59 PM

Quote:

Originally posted by iBOUNCER
OK, a few security concerns.

1) Looks like your just pulling whatever file the user asks for. See: http://www.dxan.com/cobra/image.php?...ges/header.gif

This is bad.

2) You are not validating input, equally bad; see:

http://www.dxan.com/cobra/model.php?...g%20input&id=1

You are escaping meta characters, which is a good thing.

Let me know if you need any help closing these things up.

Otherwise, looks cool

Thanks for the input, both flaws have been fixed