General Discussions

**SteveAR** · 01-06-2007, 06:46 PM

what script is this? im looking for this script for a domain i have and wanted to see if you guys can help

http://www.quick2load.com

**Lucas3677** · 01-06-2007, 08:32 PM

I don't know which script that is, but I highly advise you not to use it - unless of course you are into this whole "getting your site hacked" sort of thing.

**SteveAR** · 01-06-2007, 10:07 PM

Quote:

Originally Posted by Lucas

I don't know which script that is, but I highly advise you not to use it - unless of course you are into this whole "getting your site hacked" sort of thing.

really have more information on that?

**Lucas3677** · 01-06-2007, 11:10 PM

Well, right off the bat I can say that there are a lot of XSS exploits present there so you would have a lot of people having their accounts stolen. (I also thought that there was SQL injection points through the AJAX but apparently all those included JS files are useless, and access to the file executeDB() calls is denied.) If you patch it all up you'd be safe probably.

**SteveAR** · 01-07-2007, 02:44 AM

Quote:

Originally Posted by Lucas

Well, right off the bat I can say that there are a lot of XSS exploits present there so you would have a lot of people having their accounts stolen. (I also thought that there was SQL injection points through the AJAX but apparently all those included JS files are useless, and access to the file executeDB() calls is denied.) If you patch it all up you'd be safe probably.

thanks for the information and ill look into it.