Extended Basic 7

[Monkey_master]

When I try to enter the code , it says " Error! CSRF attack blocked " What's with that?

[ChronosX]

This mission is bad. Why? Using <?= ?> tags makes the code more unreadable and it isn't on the first page of the PHP reference linked below. You don't need $_SERVER['PHP_SELF'], leaving it blank like <form action=""> will work fine. This also mission suggests that using htmlspecialchars() will prevent XSS it might in this case but often it is not enough.

Good resources:

http://markjaquith.wordpress.com/2009/09/21/php-server-vars-not-safe-in-forms-or-links/
http://www.wonko.com/post/html-escaping
http://blog.astrumfutura.com/2012/03/a-hitchhikers-guide-to-cross-site-scripting-xss-in-php-part-1-how-not-to-use-htmlspecialchars-for-output-escaping/

[fashizzlepop]

The point of this mission isn't to show good coding practices. In fact, quite the opposite. It is geared toward having you read other people's code, spot bugs, and patch them.

[jeremia]

i finally got it, i've typed the solution 5 times just because i added a ; at the and of my php =)
please, fix your validation code xD

[fashizzlepop]

i finally got it, i've typed the solution 5 times just because i added a ; at the and of my php =)
please, fix your validation code xD

Again, you should try and change as little as possible and stick to the conventions.

[Pyrox6969]

WOW you guys think you got it bad, Here is a big hint for anyone like me

USE ' ' as your quotes and NOT " "

spent hours trying to get this thing, and that was the problem the whole time. wow time for a cig, im pissed

[fashizzlepop]

WOW you guys think you got it bad, Here is a big hint for anyone like me<br><br>USE ' ' as your quotes and NOT " " <br><br>spent hours trying to get this thing, and that was the problem the whole time. wow time for a cig, im pissed

That's why for these missions if your solution isn't working, make sure you are using the conventions set forth in the rest of the mission.