BitShop Forum

Posted: **Tue May 24, 2016 3:24 pm**

I belive that some people try to SQL inject something in my website,

index.php?page=item&id=9'A=0

The bad news is that they can see Full Path Disclosure:
Notice: Undefined variable: file in /var/www/domain.com/public_html/inc/pages/item.inc.php on line 2
Invalid item ID. Please check the URL.

Posted: **Thu May 26, 2016 10:05 am**

You should have error reporting completely disabled when the shop is live so those error messages don't show up.

Posted: **Fri May 27, 2016 4:48 pm**

Yeah, I forgot about that. Thank you.

BitShop Forum

index.php?page=item&id=9'A=0

index.php?page=item&id=9'A=0

Re: index.php?page=item&id=9'A=0

Re: index.php?page=item&id=9'A=0