Re: Security Flaw In User Note Submission Form
| From: | Daniel Convissor | Date: | Sat, 26 Jul 2008 12:45:38 +0000 |
| Subject: | Re: Security Flaw In User Note Submission Form | ||
| References: | 1 | Groups: | php.doc |
| Request: | Send a blank email to phpdoc+get-969379184@lists.php.net to get a copy of this message | ||
Hi Folks:
On Fri, Jul 25, 2008 at 11:04:48PM -0400, Daniel Brown wrote:
> While looking through parts of the website, I also audited the
> user note submission form and found a hole that allows wide-spread
> SPAM.
While that's a problem, _I_ wouldn't call that a security problem.
I tend to view security issues as being things like SQL injection and
Cross Site Scripting attacks.
--Dan
--
T H E A N A L Y S I S A N D S O L U T I O N S C O M P A N Y
data intensive web and database programming
http://www.AnalysisAndSolutions.com/
4015 7th Ave #4, Brooklyn NY 11232 v: 718-854-0335 f: 718-854-0409