View Single Post
Old 11-17-2008, 06:04 PM   #5 (permalink)
codefreek
Super Moderator
Inquisitive 
 
codefreek's Avatar
 
Join Date: Sep 2007
Location: Near you.
Posts: 791
Thanks: 241
codefreek is on a distinguished road
Default

Hello thanks for the input, @wildhoney: to much ??..
and @Salathe: as always great teacher :)

ps on the point of the regex i am still learning regex i got
it from a friend when i made my register, so i use it in anything else as i think it works great and then the insecure parts, all i can see yeah the spam part can be fixed with a session id or a capatcha maybe, and then on the part of spamming others that i can not see,

and maybe
PHP Code:
$bottest $_POST['leave_blank']; 
<div style='display:none;visibility:hidden;'>
<input type='text' name='leave_blank' id='leave_blank'>
</div>
that might not be secure that is the all i see, if you see anymore would be greatly appreciated :)

and thank you for making me a better coder :)

PS: also filter $_POST[] so we don't get any XSS attacks

Last edited by codefreek : 11-17-2008 at 06:43 PM.
codefreek is offline  
Reply With Quote