|
Posted by Sebastian Gottschalk on September 25, 2006, 8:13 am
If you were Registered and logged in, you could reply and use other advanced thread options
Neil wrote:
> It has a news section fed by a database to allow the owners of the site the
> ability to update the news pages themslves.
>
> Last week a message was added by an Iranian hacker (see the end of this
> post.)
>
> What I don't understand is how they were able to do this.
>
> The code checks for the existance of a session variable before alowing the
> page to be displayed, so how could they create this variable?
>
> Also, (from the log file,) they jumped right into the update page, not the
> form where the message is created!
>
> Any opinion would be greafully received, especially if a solution can be
> suggested!!
What about presenting the relevant code and the log entries?
| 
XML site map