Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Re[2]: Lot of SQL injection on PHP-Nuke 6.5 (secure weblog!) May 14 2003 12:57PM
Benjamin Schulz (lists hnc cc)
Hi Rynho,

> if(!isset($cid) || $cid == NULL || $cid == "" || !is_numeric ($cid))
> {
> echo "I don't like you >:|";
> exit();
> }

you know that $cid == NULL equals $cid == ""? (int)0, too btw.
either check $cid == '' (what is 0 & NULL, too)
or $cid === NULL || $cid === '',
or empty($cid)

...

[ more ]  





 

Privacy Statement
Copyright 2009, SecurityFocus