4 ms·

It's important to point out, since probably the whole automattic is still leeching from b2 and hasn't added anything

• kgeist 2y ago
  Just checked out the original version of b2 Wordpress was forked from and could immediately spot a SQL injection which I can use to take over the whole site: $log = $HTTP_POST_VARS["log"]; <..> $user_login=$log; <..> SELECT ID, user_login, user_pass FROM $tableusers WHERE user_login = '$user_login' AND MD5(user_pass) = '$password' Later it also stores the hashed password as a cookie. Some quality 2003 code :)
  • admissionsguy 2y ago
    Not necessarily if magic quotes are enabled!!
    • hedgehog 2y ago
      Oh "magic quotes", we hardly miss you.
  • lnxg33k1 2y ago
    2003? If I remember correctly, SQL injection has been in OWASP Top 10 until 2016
    • kgeist 2y ago
      The code is from 2003.
      • lnxg33k1 2y ago
        Yeah, I got that, it's just that could as well be more recent^^