> ----- Original Message -----
> From: "Cahyo" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Wednesday, September 08, 2004 3:34 PM
> Subject: Re: [tanya-jawab] OOT: INJEKSI SQL untuk CACTI v.0.8.5a
>
>
> | On Wed, 8 Sep 2004, Dave Matt wrote:
> |
> | :: Dear All,
> | :: yg merasa pake cacti 'kaktus' 0.8.5a dan versi sebelumnya :
> | :: telah ditemukan SQL injeksi...dan saya sudah mencoba :
> | ::
> | :: Injeksi SQL:
> | ::
>
http://server/cacti/auth_changepassword.php?ref=indexphp&action=changepasswo
> | :: rd&password=dave&confirm=dave&submit=Save
> | ::
> | :: Solusi:
> | :: Set "magic_quotes_gpc" ke "on"
> | ::

ngesetnya di file yg mana ya mas?
saya cari di sourcenya gak nemu paramater itu soalnya

thx,



-- 
Unsubscribe: kirim email kosong ke [EMAIL PROTECTED]
Arsip, FAQ, dan info milis di http://linux.or.id/milis.php
Tidak bisa posting? Baca:
http://linux.or.id/wiki/index.php?pagename=ProblemMilisDanSolusi
http://linux.or.id/wiki/index.php?pagename=TataTertibMilis

Reply via email to