[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Re: MULTIPLE REMOTE SQL INJECTION VULNERABILITIES---MIM:InfiniX v1.2.003--->
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: Re: Re: MULTIPLE REMOTE SQL INJECTION VULNERABILITIES---MIM:InfiniX v1.2.003--->
- From: y3nh4ck3r@xxxxxxxxx
- Date: Thu, 14 May 2009 11:16:54 -0600
I said him this. But he wants to solve on this way.
After publishing, I checked the fixing and I notified him again.
Is as difficult to include mysql_real_escape_string, addslashes, etc?
If you want security, your app mustn't depend on Magic quotes...