
11-20-2008, 07:18 AM
|
|
|
Join Date: Feb 2006
Location: Netherlands
Posts: 1,392
Благодарил(а): 0 раз(а)
Поблагодарили:
0 раз(а) в 0 сообщениях
|
|
Quote:
Originally Posted by Angel-Wings
Problem is that the MySQL commands aren't parsed correct so ' that "signs" the end of a value let MySQL think the entire Query ends here. Everything behind will produce an error.
Maybe - with weird some Email- / Board- or Username some injection can be possible.
About the sent mails - maybe a good idea to add an X-Mailer value as well that Antispam systems won't "jump" on the mail with a false-positive.
In "remindermail.php" something like:
Should do it.
|
Thanks, I'll try that  .
|