MyBB Hacks

Could you review xSpy Plugin (http://mods.mybboard.net/view/xspy-plugin)? Always if you don't mind

And i'm ok with negative reviews.

Sure flash.tato

hey you can review my plugin???

http://mods.mybboard.net/view/hide-until-thanks ^^

greetings

Sure Walkman 5.0 - I'll get around to it soon

Of course I can, as long as it satisfies the requirements in the first post.

I've found a security hole in one of his plugins already (SQL injection). I believe many other plugins may suffer from similar problems but I can't be bothered to post in the release threads to download so..

Well I gain nothing so I won't do it. I've reported it on his website and he thanked me. But I understand your point

I'd say that MANY plugins have SQL injections or similar - I'd hardly call one particular author the only culprit.
But oh well...

I make plugins (mainly for my own use) and I have to say I have no real idea how to check for MYSQL injection vulnerabilities - do you have any tips/pointers on things to avoid/look for?

Read:
http://www.learnphponline.com/security/s...http://www.learnphponline.com/security/sql-injection-prevention