Be careful what you put in your querystring

Today, a guy posted the following querystring in the IRC:


As you see, the price of the product has been put in the querystring, so you can easily change the price you have to pay ;-)

Obviously, such mistakes are still made. I hope you do it better.


Post a Comment

Required fields are marked *

%d bloggers like this: