rc2 profile subscription injection possible bug?

Hi,

In RC2, when a user go to another profile and click subscribe, if try a simple sql injection site not show error... try with this string: ' or '0=0--' in name field.... it don't print any errors...simply do nothing... it's a bug or it's normal?

Thank

Quote · 6 Dec 2009

don't take care about this...all blocked by ids!

Quote · 6 Dec 2009
 
 
Below is the legacy version of the Boonex site, maintained for Dolphin.Pro 7.x support.
The new Dolphin solution is powered by UNA Community Management System.