TalkPHP - View Single Post - Snipply.com

Orc · 03-20-2008, 09:39 PM

Quote:

Originally Posted by freenity

and more sql inj:

http://www. snipply.com/snipplets.php?s=59'
http://www. snipply.com/snipplet.php?s=P'

and I guess there should be more

The second one can easily be fixed, just do:

PHP Code:


			


 if (!is_numeric($_GET['s']))

 {

   header("Location: ./");

 }