Bug on Brijj.com

Found this on Brijj.com after a couple of minutes of browsing. I wasn’t looking for something like this. I imported and then deleted bunch of contacts. The parameter count, which had the number of people I deleted looked out of the place. In most secure applications it is handled on the server side instead of passing it as a GET parameter and then reading it. Even if it is passed as a GET param due to app limitations, server side processing is done to the GET text to make sure it is what it should be. In this case it should be checked if it is an INTEGER, if not then don’t display it.

If you enjoyed this post, make sure you subscribe to my RSS feed!