Timeline for Database output function
Current License: CC BY-SA 3.0
10 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Sep 12, 2012 at 7:05 | vote | accept | Miqdad Ali | ||
| Jun 22, 2012 at 8:48 | answer | added | Corbin | timeline score: 2 | |
| Jun 18, 2012 at 16:16 | history | edited | palacsint | CC BY-SA 3.0 |
added 123 characters in body; edited tags; edited title
|
| Jun 18, 2012 at 16:02 | answer | added | mseancole | timeline score: 1 | |
| Jun 18, 2012 at 7:35 | history | tweeted | twitter.com/#!/StackCodeReview/status/214622269450878977 | ||
| Jun 18, 2012 at 5:06 | comment | added | Corbin | Other than the first section, codereview.stackexchange.com/questions/12647/… should explain it for the most part. | |
| Jun 18, 2012 at 4:56 | comment | added | Miqdad Ali | Can you please explain it little more ... ? | |
| Jun 18, 2012 at 4:55 | comment | added | Corbin |
Will post a proper answer later, but a few things jump out at me. Namely, SQL injection, your include is open to cross directory including, you don't check that any of the keys are set in your array accesses, and you don't escape your HTML output.
|
|
| Jun 18, 2012 at 4:55 | answer | added | haylem | timeline score: 5 | |
| Jun 18, 2012 at 4:44 | history | asked | Miqdad Ali | CC BY-SA 3.0 |