PHP code inclusion a security risk? lens? - GoFuckYourself.com

Socks · 10-01-2002, 08:44 PM

Just curious, I noticed there is a "PHP" button to insert code into your posts.. Does that pose any security risks for GFY? Allowing a malicious user to execute code might not be good, but I'm no expert on the matter!

Babaganoosh · 10-01-2002, 08:46 PM

It doesn't execute the code. It displays it.

pr0 · 10-01-2002, 08:46 PM

It just shows up as code i think

Apollo · 10-01-2002, 08:49 PM

The PHP button in the form for posting doesn't execture code:

"Insert text with PHP syntax highlighting"

So I would gather it's a way for people to post scripting code for others to view and have it formatted the way most are used to seeing such code.

I've never tried it so I could be wrong....

Socks · 10-01-2002, 08:49 PM

Well then... ;)

Apollo · 10-01-2002, 08:56 PM

Quote:

Originally posted by pornopete

PHP Code:

<?PHP print "Totally Harmless" ?>

Wow, on a 1600x1200 screen that just looks like a few pixels of coloring

10-01-2002, 08:44 PM	#1
Socks Confirmed User Industry Role: Join Date: May 2002 Location: Toronto Posts: 8,475	PHP code inclusion a security risk? lens? Just curious, I noticed there is a "PHP" button to insert code into your posts.. Does that pose any security risks for GFY? Allowing a malicious user to execute code might not be good, but I'm no expert on the matter!

10-01-2002, 08:46 PM	#2
Babaganoosh ♥♥♥ Likes Hugs ♥♥♥ Industry Role: Join Date: Nov 2001 Location: /home Posts: 15,841	It doesn't execute the code. It displays it. __________________ I like pie.

10-01-2002, 08:49 PM	#4
Apollo Confirmed User Join Date: Sep 2002 Location: Canada Posts: 433	The PHP button in the form for posting doesn't execture code: "Insert text with PHP syntax highlighting" So I would gather it's a way for people to post scripting code for others to view and have it formatted the way most are used to seeing such code. I've never tried it so I could be wrong.... __________________ ----------- Free automated way to rotate sponsor gallery thumbnails on your sites TgpWizards - Free TGP Gallery submission system

10-01-2002, 08:46 PM	#3
pr0 rockin tha trailerpark Industry Role: Join Date: May 2001 Location: ~Coastal~ Posts: 23,088	It just shows up as code i think