Jump to content


Corporate Sponsors


Latest News: (loading..)

- - - - -

Any Security Risk for PHP Close Tag


3 replies to this topic

#1 yansfung

  • Community Member
  • 59 posts
  • Real Name:Yan, SY FUNG
  • Gender:Male
  • Location:Hong Kong

Posted 19 July 2011, 04:08

Is that any security risk to install the Russian Language Pack for osc2.3.1?

It is found that the PHP close tags in most files of this add-on are missed.

[img]http://forums.oscommerce.com/public/style_emoticons/default/crying.gif[/img]
YaNotCook !!

#2 DunWeb

  • Community Sponsor
  • 10,464 posts
  • Real Name:Chris Dunn
  • Gender:Male
  • Location:Tecumseh, Ontario, Canada N8N 1X8

Posted 19 July 2011, 04:13

If the closing php tag is missing from the contribution, I suggest making the corrections and then uploading the revised contribution so that future downloads will be formatted properly.





Chris
:|: Was this post helpful ? Click the LIKE THIS button :|:

:|: Click Here to learn how I can help you with custom coding, add ons, security and templates :|:

:|: Need an Area Calculator, Pre-Paid Account, Virtual Pin, Auction or Layaway Add on ? Click Here :|:

#3 Jack_mcs

  • Community Member
  • 24,453 posts
  • Real Name:Jack
  • Gender:Male

Posted 19 July 2011, 12:02

View Postyansfung, on 19 July 2011, 04:08, said:

Is that any security risk to install the Russian Language Pack for osc2.3.1?

It is found that the PHP close tags in most files of this add-on are missed.

[img]http://forums.oscommerce.com/public/style_emoticons/default/crying.gif[/img]
The closing ?> is not required in php files unless it is in a file being included and the following code is not php.

#4 yansfung

  • Community Member
  • 59 posts
  • Real Name:Yan, SY FUNG
  • Gender:Male
  • Location:Hong Kong

Posted 20 July 2011, 02:17

Thanks Jack for your replied tricks!
[img]http://forums.oscommerce.com/public/style_emoticons/default/thumbsup.gif[/img]

View PostJack_mcs, on 19 July 2011, 12:02, said:

The closing ?> is not required in php files unless it is in a file being included and the following code is not php.

YaNotCook !!