smf_setThemeOption calls magic on the server to change the DB. Without sanitisation. Meaning rooms users wouldn't have access to could be granted access with a single line of JavaScript that anyone can run with barely 5 seconds' effort in their browser.
Re: Javascript / cookie
Re: Javascript / cookie
0 commentaires:
Enregistrer un commentaire