???? 9/11/2013 10:39 ??, ?/? Chris Angelico ??????:
locked everything out, including legitimate usage!
ChrisA
On Sat, Nov 9, 2013 at 7:31 PM, ????? ??????????? wrote:
if page and os.path.isfile( cgi_path + page ) in os.listdir( cgi_path ):
Try pass bogus values again into my database!
Well done! *slow clap* In the interests of security, you have justif page and os.path.isfile( cgi_path + page ) in os.listdir( cgi_path ):
Try pass bogus values again into my database!
locked everything out, including legitimate usage!
ChrisA
Ah yes you are right!
Correction!
if page and page in os.listdir( cgi_path ):
That should keep the site working and still leave the attacker away from
my daatabase!
