6 Comments

xanda April 18, 2008 at 8:54 pm

course announcement aku bleh inject so that aku bleh access subject yang aku tak ambik
bagi aku music tu mengakitkan hari.. ko kena buat panel untuk student enable or disablekan. hahah
by default, login page tu… radio button tick kan kat student sebab most yang akan guna is student
too many info inside the cookie and some of it can be manipulate
after delete the announcement, make it redirect to the announcement page
please do html tags filtering for announcement
notes directories boleh di travel >:)
malicious code or file can be uploaded and EXECUTED
aku stop jab.. mandi, dinner and makan ubat… kalo rajin aku sambung malam nie…

Reply
Hedayat April 19, 2008 at 2:46 am

thx sbb bitau .. geek

Reply
xanda April 19, 2008 at 5:10 pm

ala marah ke?.. aku nak inform je… sebab semua tu bleh effect sampai ke root hosting ko.. tak suke xpe… aku tak beritau dah

Reply
Hedayat April 19, 2008 at 8:23 pm

no problem bai ..

u r free to speak .. ape lagi vulnerability nye?

Reply
Kerja2 tertangguh » SiZuKa's DiaRy April 21, 2008 at 3:36 pm

[...] FYP (done) ——— 24th April 2008 [...]

Reply
Submitted FYP? Graduating? Wait… | Xanda's Blog !~! May 25, 2008 at 4:29 pm

[...] Dayat & aweknya [...]

Reply