[Security Lesson] Find the Vulnerability and Exploit :: 2

[Obsidian]

Spoiler:

Gah, I totally missed that missing {, but oh well. That's not really security related though.

I'm wondering how many more of these security lessons we can get. These are kinda fun.

[Techie-Micheal]

Spoiler:

I don't know what David has planned, but I can come up with a few as well.

[Typo]

How fun

Spoiler:

I see improper use of cookies to prove credentials which would allow anyone who can edita file using notepad to act as an admin and I also see an un-sanitized call to the superglobal _GET for 'ID' being used which is a very bad idea unless you like being open to XSS exploits.

Thanks for the distraction.

Typo