aman207 / DonatorExpress

Allows members on your server to view and purchase ranks/items without any hassle.
http://dev.bukkit.org/bukkit-plugins/donator-express/
2 stars 3 forks source link

SQL Injections #40

Open CrystalMare opened 9 years ago

CrystalMare commented 9 years ago

Why not just use MySQLi prepared statements instead of https://github.com/aman207/DonatorExpress/blob/master/webportal/include/fg_membersite.php#L836 It's still very vulnerable to SQL Injections.