Waks Ask & Answer
Waks Ask and Answer script is very insecure. The script has un-cleaned data passed to the form via the $_GET superglobal array (i.e. via the url which anyone can maliciously edit to inject data into files), each question is stored without any decent sanitisation and it requires a directory CHMODed to 777 which can be used to execute "hacker's" files.
The suggested fixes on the Internet do not fix the biggest problems with this script and will not stop your hosting account from being hacked/cracked.
Verdict: Awful; I found this script insecure. Do not use.
Reviewed: 25th November 07 by Jem
Bookmark At: StumbleUpon, Digg
Handy Stuff
Downloads
Top Links
Resources