Tag Archives: exploit

Do you use PHP $_SERVER variables in forms?

photo credit: Melissa Maples I came across an interesting point that outlines that dangers of using $_SERVER variables to submit form, a practice that’s pretty common in WordPress plugins. The problem is that it opens the form up to be … Continue reading

Posted in security | Tagged , , | Leave a comment

Wordpress 2.6.1 Exploit: Upgrade to avoid hack

I was reading around today after cleaning up a website that got hacked when I saw an example of a vulnerability that exists in WordPress 2.6.1 The security hole is this: Imagine a blog site using wordpress 2.6.1 and its … Continue reading

Posted in security | Tagged , , | Leave a comment