Click here to Skip to main content
15,941,690 members
Home / Discussions / Web Development
   

Web Development

 
GeneralRe: Open a file from server [modified] Pin
hiral_shah6-Mar-07 19:23
hiral_shah6-Mar-07 19:23 
GeneralRe: Open a file from server Pin
Bradml6-Mar-07 19:50
Bradml6-Mar-07 19:50 
GeneralRe: Open a file from server Pin
hiral_shah6-Mar-07 19:58
hiral_shah6-Mar-07 19:58 
GeneralRe: Open a file from server Pin
Bradml6-Mar-07 20:14
Bradml6-Mar-07 20:14 
GeneralRe: Open a file from server Pin
Bradml6-Mar-07 20:46
Bradml6-Mar-07 20:46 
GeneralRe: Open a file from server Pin
Bradml6-Mar-07 20:46
Bradml6-Mar-07 20:46 
GeneralRe: Open a file from server [modified] Pin
hiral_shah6-Mar-07 21:27
hiral_shah6-Mar-07 21:27 
GeneralRe: Open a file from server Pin
Bradml6-Mar-07 21:56
Bradml6-Mar-07 21:56 
Ok I have been reading the function where you get data from the database. One thing that really strikes me is that you don't validate the data before you pass it to the database. This is incredibly important because otherwise people can execute any SQL commands they want (including stealing other people's files).

Please go to http://www.phpsec.org[^] to learn more.

I have now emailed you an updated copy of the script which should fix the problem you have but will not fix the security problem.




Brad
Australian

- Christian Graus on "Best books for VBscript"

A big thick one, so you can whack yourself on the head with it.

GeneralRe: Open a file from server Pin
hiral_shah6-Mar-07 23:14
hiral_shah6-Mar-07 23:14 
GeneralRe: Open a file from server Pin
Bradml6-Mar-07 23:25
Bradml6-Mar-07 23:25 
GeneralRe: Open a file from server Pin
Bradml6-Mar-07 23:26
Bradml6-Mar-07 23:26 
GeneralRe: Open a file from server Pin
Bradml6-Mar-07 23:26
Bradml6-Mar-07 23:26 
GeneralRe: Open a file from server Pin
hiral_shah7-Mar-07 0:01
hiral_shah7-Mar-07 0:01 
GeneralRe: Open a file from server Pin
hiral_shah7-Mar-07 0:03
hiral_shah7-Mar-07 0:03 
GeneralRe: Open a file from server Pin
Bradml7-Mar-07 0:35
Bradml7-Mar-07 0:35 
Questionhow to convert List of objects to objectDatasource ? Pin
subai6-Mar-07 0:37
subai6-Mar-07 0:37 
AnswerRe: how to convert List of objects to objectDatasource ? Pin
kubben6-Mar-07 3:21
kubben6-Mar-07 3:21 
GeneralRe: how to convert List of objects to objectDatasource ? Pin
subai6-Mar-07 3:36
subai6-Mar-07 3:36 
QuestionCrystal Report Chart Type Pin
chetanvaghela5-Mar-07 22:46
chetanvaghela5-Mar-07 22:46 
QuestionHow to make page for members at the time they where created? Pin
VinuLite5-Mar-07 22:14
VinuLite5-Mar-07 22:14 
AnswerRe: How to make page for members at the time they where created? Pin
Bradml5-Mar-07 23:12
Bradml5-Mar-07 23:12 
GeneralRe: How to make page for members at the time they where created? Pin
VinuLite5-Mar-07 23:35
VinuLite5-Mar-07 23:35 
QuestionPopup Blocker Detection using Javascript Pin
babutkchn5-Mar-07 20:13
babutkchn5-Mar-07 20:13 
AnswerRe: Popup Blocker Detection using Javascript Pin
Bradml5-Mar-07 22:19
Bradml5-Mar-07 22:19 
GeneralRe: Popup Blocker Detection using Javascript Pin
babutkchn5-Mar-07 23:08
babutkchn5-Mar-07 23:08 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.