7096
Modification Help / Re: Data management?
« on: July 03, 2013, 09:06:25 PM »One tiny flaw: needs data sanitization. You don't want to find out some noob named himself ;eval(quit();) orsomething worse.I'm pretty sure the values get put into "" when using export, right?
>>> $ImportantData16807_firstName = ;eval(quit);
Just ban semicolons and parenthesies and you're probably fine tho
So if you prefix all " with a \ it should be fine.