cliftonbazaar Posted September 16, 2011 Share Posted September 16, 2011 proof - http://www.testcricketmanager.com/phpfreaks.txt I have put version 0.1 on the website to attract players for testing, I wish for someone to test this by creating an account and then entering the game (Please note that the actual game engine is not working at the moment, players can only create a team). Also note that when creating an account I also need this tested. Link to comment Share on other sites More sharing options...
Coreye Posted September 19, 2011 Share Posted September 19, 2011 When you click "If you wish to create a free acount please click here" and you don't have javascript enabled you get sent to http://www.testcricketmanager.com/error.php. When you register you get this error: Error: Unknown column 'membercricket' in 'field list' Link to comment Share on other sites More sharing options...
cliftonbazaar Posted September 19, 2011 Author Share Posted September 19, 2011 Thanks for that, have fixed those two errors. Link to comment Share on other sites More sharing options...
doddsey_65 Posted October 7, 2011 Share Posted October 7, 2011 XSS issue here: http://www.cliftonbazaar.com/register.php?referrer=%27%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert%280x000280%29%3C/script%3E Link to comment Share on other sites More sharing options...
cliftonbazaar Posted October 7, 2011 Author Share Posted October 7, 2011 Thanks for that, unfortunately I have to goto work but I will fix it as soon as I get home. Link to comment Share on other sites More sharing options...
Recommended Posts