Sorry to say, but I will be removing this from my hotel. The addon allows scripts to be embedded into a comment, which means users can redirect to another site from the comments.
Printable View
Sorry to say, but I will be removing this from my hotel. The addon allows scripts to be embedded into a comment, which means users can redirect to another site from the comments.
Then patch it. :sleep:Quote:
Originally Posted by Resplendency
ROFL! ROFL! ROFL! It doesnt put filtering on it?
F
A
I
L
ROFL!
I'm no PHP professional but you could strip_chars to remove the such security threats; such as the code below which should only allow bold, italic, and underlined text.Quote:
Originally Posted by Resplendency
PHP Code:strip_tags($text, '<b><em><u>');
:O If this make sql injections avaiable.. it is shit. xDDD I am sry.. I am not the security professional. I will update the first post :D
I was just letting Zorex know so he could update his addon for future downloads.
Wow,
Thats a great release,
nice job dude
10/10
Maybe if you learn some more PHP, scripter protection, strip slashes and all that stuff then it could be more safer ;)
it doesn't work
he don't save anything
Hmm, Link doesn
Link doesn't work..
Thank you so much =D
http://360rage.de/downloads/news_comments.rar
link not found
Reuploaded:
MegaUpload
MediaFire
Other Download
Also added a Overview for Housekeeping.
You need to add this to your Housekeeping/Index.php:
PHP Code:} elseif($p == "comments"){
$tab = 2;
include('comments.php');
thank you!
Nice release!
10/10
Thx ;)
Can y have delete comment for housekeeping ?:
Thx
for comment Housekeeping coding
link
http://360rage.de
No work no clicking
is down
xDDDD
would reccomend using this. its OLD, and has SQL injection exploits! Dont use if you want to keep your DB