Super helpful, thank you for
taking the time to post!... read »
John Ramon
Posted: Aug 18, 2010
Yep all user inputs are filtered for meta characters, and files are uploaded outside of root. I never thought I would learn so much about hacking... read »
Perhaps you've covered this under XSS, but if you haven't, have a look at CSRF attacks (prounounced 'sea surf'). The famouse MySpace worm was one... read »