Re: Security Flaw In User Note Submission Form

From: Date: Sat, 26 Jul 2008 12:45:38 +0000
Subject: Re: Security Flaw In User Note Submission Form
References: 1  Groups: php.doc 
Request: Send a blank email to phpdoc+get-969379184@lists.php.net to get a copy of this message
Hi Folks: On Fri, Jul 25, 2008 at 11:04:48PM -0400, Daniel Brown wrote: > While looking through parts of the website, I also audited the > user note submission form and found a hole that allows wide-spread > SPAM. While that's a problem, _I_ wouldn't call that a security problem. I tend to view security issues as being things like SQL injection and Cross Site Scripting attacks. --Dan -- T H E A N A L Y S I S A N D S O L U T I O N S C O M P A N Y data intensive web and database programming http://www.AnalysisAndSolutions.com/ 4015 7th Ave #4, Brooklyn NY 11232 v: 718-854-0335 f: 718-854-0409

« previous php.doc (#969379184) next »