Plugin/Modification Review Service

[flash.tato]

Could you review xSpy Plugin (http://mods.mybboard.net/view/xspy-plugin)? Always if you don't mind

And i'm ok with negative reviews.

[ZiNgA BuRgA]

Sure flash.tato

[Walkman 5.0]

hey you can review my plugin???

http://mods.mybboard.net/view/hide-until-thanks ^^

greetings

[ZiNgA BuRgA]

Sure Walkman 5.0 - I'll get around to it soon

[ZiNgA BuRgA]

Of course I can, as long as it satisfies the requirements in the first post.

[Pirata Nervo]

I've found a security hole in one of his plugins already (SQL injection). I believe many other plugins may suffer from similar problems but I can't be bothered to post in the release threads to download so..

[Pirata Nervo]

Well I gain nothing so I won't do it. I've reported it on his website and he thanked me. But I understand your point

[ZiNgA BuRgA]

I'd say that MANY plugins have SQL injections or similar - I'd hardly call one particular author the only culprit.
But oh well...

[leefish]

I make plugins (mainly for my own use) and I have to say I have no real idea how to check for MYSQL injection vulnerabilities - do you have any tips/pointers on things to avoid/look for?

[Pirata Nervo]

Read:
http://www.learnphponline.com/security/s...http://www.learnphponline.com/security/sql-injection-prevention