search

macg-gh / madlibs

A little game that runs on a LAMP stack
0 stars 0 forks source link

Parameter pollution #34

Closed macg-gh closed 4 years ago

macg-gh commented 4 years ago

Post args shouldn't be duplicated. This is called parameter pollution and is a possible method of exploit. So instead of just letter=word it should be letter,index=word. E.g.

M1=marble&M2=most&F3=fun&G4=guy

macg-gh commented 4 years ago

This was added in the splitup branch before it was pulled into master.