News for hackers. Stuff that matters.

A comment on Login Forms Over HTTPS, Please. Parent comment

Re:Login Forms Over HTTPS, Please by mgkimsal on Friday January 29, 2016 @12:52PM (#10996939)
$sql = "select * from user where username='".$_COOKIE['username']."'";

Came across this last year... have seen variations of it over the last 15+ years, but saw it in 'new' code last summer. :/

[ Parent | on HN ]
Re:Login Forms Over HTTPS, Please by qb45 on Friday January 29, 2016 @02:07PM (#10997636)
Sad reality of rising kids with the notion that security is about forms and passwords and not about hacking stuff.
[ Parent | on HN ]