Vcoderz Community - View Single Post

RUSSIAN · 11-09-2009

Params in the script r.php are not filtered.
For example:
http://vcoderz.com/r.php?p=nnn
http://vcoderz.com/r.php?p=dl_up&id=111833
So anyone can know paths and that you use MySQL database. It isn't good, so you should fix it.Also, I suggest you to use mod_rewrite.

11-09-2009	#53
RUSSIAN Registered Member Last Online: 10-08-2023 Join Date: Nov 2009 Posts: 569 Thanks: 838 Thanked 232 Times in 174 Posts Groans: 24 Groaned at 16 Times in 13 Posts	Params in the script r.php are not filtered. For example: http://vcoderz.com/r.php?p=nnn http://vcoderz.com/r.php?p=dl_up&id=111833 So anyone can know paths and that you use MySQL database. It isn't good, so you should fix it.Also, I suggest you to use mod_rewrite. Last edited by RUSSIAN; 11-09-2009 at 08:02 PM.