mikemidd77 Posted July 4, 2007 Share Posted July 4, 2007 http://www.mpmgraphics.com/oats Could someone test this for me. The basic idea of this (which is still under development) is to be able to pre-design a site. You can type in your settings and press ENTER to change them. I have registered globlas off so the pop-up link will not display any info. I need to know how to get around that without turning Reg. Globals On. Can anyone help. Anymore info needed let me know. Thanks Mike M. Link to comment Share on other sites More sharing options...
Daniel0 Posted July 4, 2007 Share Posted July 4, 2007 I don't see much point in that page, it just lets you change how that page looks. Those pop-up windows you are talking about, they do not appear... I need to know how to get around that without turning Reg. Globals On. $_GET Link to comment Share on other sites More sharing options...
agentsteal Posted July 4, 2007 Share Posted July 4, 2007 Cross Site Scripting: There is Cross Site Scripting if the fields are set to ">code. META Tag Injection: http://www.mpmgraphics.com/oats/?text1=<meta+http-equiv='Set-cookie'+content='vulnerable=true'> Link to comment Share on other sites More sharing options...
mikemidd77 Posted July 4, 2007 Author Share Posted July 4, 2007 Those pop-up windows you are talking about, they do not appear If you click the links on the left (page-background-color) a pop up box should appear. The input boxes are vulnerable to Cross Site Scripting Any suggestions for a work around? Thanks for the feedback! Mike Link to comment Share on other sites More sharing options...
mikemidd77 Posted July 4, 2007 Author Share Posted July 4, 2007 Any tips on where to find solutions for these problems? This project is my way of getting better aquainted with PHP. Link to comment Share on other sites More sharing options...
jellis Posted July 6, 2007 Share Posted July 6, 2007 Do some reading on validating data input. The search button is your friend. Link to comment Share on other sites More sharing options...
mikemidd77 Posted July 6, 2007 Author Share Posted July 6, 2007 Thanks for the tip. I allready fixed it. Link to comment Share on other sites More sharing options...
LiamProductions Posted July 6, 2007 Share Posted July 6, 2007 You should make the hieghts a certain about of chracters because i can put 10000000000000000000000000000 and it will make your page dead big Link to comment Share on other sites More sharing options...
Recommended Posts