Timeline for PHP upload script might be vulnerable
Current License: CC BY-SA 3.0
8 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Mar 27, 2017 at 1:50 | vote | accept | Alex | ||
| Jul 2, 2016 at 19:37 | comment | added | Ry- |
Looks like you’re missing a return before the recursive findNewURL().
|
|
| Jul 2, 2016 at 15:35 | answer | added | tim | timeline score: 3 | |
| Jul 2, 2016 at 14:40 | comment | added | pacmaninbw♦ | Suggestion, move the findNewURL() code to the question. You can do this before someone attempts to answer. | |
| Jul 2, 2016 at 14:18 | comment | added | Alex |
Here it is: function findNewURL() { global $db; $file = generateRandomString(5); try { $stmt = $db->query("SELECT url FROM files WHERE url='$file'"); $row = $stmt->fetch(PDO::FETCH_ASSOC); } catch(PDOException $ex) { return 'error'; } if($row) findNewURL(); return $file; }
|
|
| Jul 2, 2016 at 14:12 | comment | added | David Foerster |
What does findNewURL() do?
|
|
| Jul 2, 2016 at 14:04 | review | First posts | |||
| Jul 2, 2016 at 14:38 | |||||
| Jul 2, 2016 at 14:04 | history | asked | Alex | CC BY-SA 3.0 |