3 ms·

Sanitize your inputs...

• segmondy 8y ago
  It wasn't just inputs, it's not enough, weak types. Using == instead of === they could brute force guess a session, it took multiple exploits to escalate till they got shell access.