4 ms·
That's not the half of it - if you knew what that cookie contained…
by ajanuary 11y ago
That's not the half of it - if you knew what that cookie contained…
- qb45 11y agoLike... login and cleartext password, to lookup your profile on each request?
- mgkimsal 11y ago$sql = "select * from user where username='".$_COOKIE['username']."'"; Came across this last year... have seen variations of it over the last 15+ years, but saw it in 'new' code last summer. :/
- qb45 11y agoSad reality of rising kids with the notion that security is about forms and passwords and not about hacking stuff.