RE: Need Help: PHP Not redirecting 09-02-2017, 08:01 AM
#5
The second validation, if the fetched data and the Post Data are equal is very nice, but i hope that you are escaping SQL-interpretable Signs in the Form Data, because with enough motivation and some Ideas, it is possible to overwrite the User Data.
And without escaping your Query is vulnerable to injection, even with pdo Prepared Statements
// POST DATA
// gamertag=' or 'a'='a'#--'
//gamertag='test' or 'a'='a
And without escaping your Query is vulnerable to injection, even with pdo Prepared Statements
// POST DATA
// gamertag=' or 'a'='a'#--'
//gamertag='test' or 'a'='a
(This post was last modified: 09-03-2017, 01:42 AM by saegenulled.)
![[+]](https://sinister.ly/images/modern/collapse_collapsed.png)
