php based home inventory system
Posted by coldtobi | 19 Apr, 2009, 21:07I'm currently looking for a system for keeping an overview over my electronic parts I have "on stock", storing the datasheets and keeping and especially where I put them.
During this I found "home-inventory". Looks ok, but also lacks some features, like it can only store images...
PS: I have to rethink about the "looks ok". The first peek on the source code reveals, that the author did not care about sanitizing user input:
// delete first picture if exist
$sSql = 'SELECT ITM_Picture FROM Item WHERE ITM_ID = ' . $_REQUEST['id'];
$pictName = fetchFromDb($sSql, true);
Aarrghh.
<—&mdash Showing ERROR? Click here!
Blog and Website | Comments (0) | Trackbacks (0)
Related Articles:
- What NAS?
- How to disable La Fonera
- Windows Vista Licensing
- Installing Debian on the Thecus N2100 -- PART 3 -- Installing Debian
- Upgrading La Fonera to 0.7.1 r2 (aka 0.7.1.2)