Forum Bug: "Signatures do not show apostrophes"

Circuitsoft · 2015-07-02 15:19

Signatures do not show apostrophes

As a programmer, this terrifies me. Because apostrophes are used in many programming languages as quoting characters, the fact that this could be an issue indicates tremendous potential for remote code execution and SQL injection. Seriously, take this forum down before you're hacked.

Courtney Jacobs · 2015-07-02 15:30

This bug has already been reported.

http://forums.parallax.com/discussion/161405/new-parallax-forums-issue-report-list#latest

Circuitsoft · 2015-07-02 15:35

I know; this is an attempt to comment on that report. To me, this is the most glaring bug on the list, for reasons that I stated in the paragraph below. That this could even be a problem indicates that the code in question was written by someone who does not know how to properly sanitize variables, and that it's a problem in some places and not others indicates a software architecture that is not easily secured.

Forum Bug: "Signatures do not show apostrophes"

Comments