Potential XSS in PHP Sample page
It has been brought to our attention by the team at ush.it that the sample.php page in our PHP Network Client has code that could have been exploited via an XSS attack. The sample page is not part of the network client itself, it is just provided as an example of how to add two-factor authentication to PHP applications.
We've touched base with the Enterprise users that we know have used WiKID in their PHP applications. So far, no one has used that code. Rather, they have taken their existing authentication pages and added the WiKID code to bring two-factor authentication into the mix.
More information on the code in question can be found here
Updated: Corrected link.
- Category(s)
- Two Factor Authentication
- WiKID


Digg this!
Del.ico.us
Google
Yahoo bookmarks
Reddit
Spurl
Simpy
