search

s4n7h0 / xvwa

XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security.
GNU General Public License v3.0
1.69k stars 339 forks source link

Fix command injection - SECURITY ISSUE #4

Closed ad-m closed 8 years ago

s4n7h0 commented 8 years ago

@ad-m The existing code works smooth without even validating the IP. Neverthless, this will be a neat first level filter to atleast validate IP. I agree usually developers do that way. Thanks for the suggestion.