paralax/lfi-labs

Possible unintentional bug in LFI-3?

frankfarmer opened this issue · 3 comments

frankfarmer commented

3d02078#commitcomment-22818897

The form method is GET, but the code references $_POST, so the script does nothing unless you tamper with the form. Is this an intentional bug?

frankfarmer commented

https://github.com/paralax/lfi-labs/blob/master/LFI-8/index.php

LFI-8 contains a smilar GET/POST mismatch

(I'd be glad to correct these in a PR if they are indeed not intentional bugs)

paralax commented

yep, those are bugs. nice catches :) happy to take a PR if you're feeling interested, otherwise i can do it.

paralax commented

thanks, @frankfarmer, nice catches! all fixed i hope.

Dockerhub should also auto-update with the github hook.

  • 👍1