search

dscuik / BooksRecommender

2 stars 0 forks source link

SQL Injection vulnerability #1

Open celyes opened 4 years ago

celyes commented 4 years ago

Hello, everyone.

I'm opening this issue to inform you that all PHP files containing SQL queries are vulnerable to SQL injection.

Suggested fix: try using prepared statements

I'm tagging @madenemalika-zz since the PHP files are commited by her @HouariZegai have a quick look

Thank you all

HouariZegai commented 4 years ago

Salem Ilyes,

You right, I am also saw it, ping @madenemalika.

Thanks for your feedback.

celyes commented 3 years ago

@madenemalika Any commits?

celyes commented 3 years ago

UPDATE: XSS and CSRF Vunerabilities could also be found.