2012-08-09
2012-08-09
Zero Percent Game Dev - Exposing vulnerability
Yes, this means that if you can insert code into that field you can have the server run any PHP code you want. However, if you can make arbitrary insertions into the database, you can already do whatever you want at any moment (please don't).