lolz.url [A short URL service]

Your script has a slight vulnerability if the client's configuration enables 'register globals'. Malicious users can craft the page's header to fit their needs.

Replace:

PHP Code:

---

$header .= "Location: "; /* Sets header */ 


---

With:

PHP Code:

---

$header = "Location: "; /* Sets header */ 


---