Welcome to HBH! If you have tried to register and didn't get a verification email, please using the following link to resend the verification email.

An offer to anyone who's bored...


ghost's Avatar
0 0

So yeah, if you read my previous post that was like forever ago, I wrote a PHP guestbook, and I had people test it.

Well, so far its faired well, except for the file inclusion x.x . So yeah, I still want to see if its vulnerable in some way. I've tested it myself, with no results, so I figure there are MANY people WAY better than me. So, if your bored, your welcome to try anything on it. If you find a vulnerability, would you either PM me on here, OR email me at worrmy390@hotmail.com? Edit: Oh lord, I forgot the link x.x http://fatigue.freehostia.com/Guestbook.php Thanks,

Fatigue


ghost's Avatar
0 0

I'd filter the inputs so it doesn't write the guestbook entry if any of the $_POST variables are not set or blank. I'm seeing a few completely blank ones there. that's the only suggestion I have so far.


ghost's Avatar
0 0

Oh, thank you for the idea!