php based home inventory system
Posted by coldtobi | 19 Apr, 2009, 21:07I'm currently looking for a system for keeping an overview over my electronic parts I have "on stock", storing the datasheets and keeping and especially where I put them.
During this I found "home-inventory". Looks ok, but also lacks some features, like it can only store images...
PS: I have to rethink about the "looks ok". The first peek on the source code reveals, that the author did not care about sanitizing user input:
// delete first picture if exist
$sSql = 'SELECT ITM_Picture FROM Item WHERE ITM_ID = ' . $_REQUEST['id'];
$pictName = fetchFromDb($sSql, true);
Aarrghh.
(More)
<—&mdash Showing ERROR? Click here!
