Your script has a slight vulnerability if the client's configuration enables 'register globals'. Malicious users can craft the page's header to fit their needs.
Replace:With:PHP Code:$header .= "Location: "; /* Sets header */
PHP Code:$header = "Location: "; /* Sets header */
Results 11 to 11 of 11
Thread: lolz.url [A short URL service]
-
Last edited by nets; 18-04-2007 at 09:15 PM.
kinda quit.
Reply With Quote
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts