Quote:
Originally Posted by tasos2001
exploits?
|
Yes, there are exploits.
As an example (pages/calendar.php):
PHP Code:
<?php
setlocale(LC_TIME, "de_DE");
$monate = array(1 => "Januar",
2 => "Februar",
3 => "März",
4 => "April",
5 => "Mai",
6 => "Juni",
7 => "Juli",
8 => "August",
9 => "September",
10 => "Oktober",
11 => "November",
12 => "Dezember");
$monat = date("n");
$jahr = date("y");
if (empty($_GET['m'])) {
$_GET['m'] = $monate[$monat];
}
?>
<div class="news_head">Eventkalender - <?PHP if (isset($_GET['m']) and !empty($_GET['m'])) {
echo $_GET['m'];
} else {
echo $monate[$monat];
} ?> '<?PHP echo $jahr; ?>
</div>
It's not difficult to fix all. It's just time intensive.