<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7638.1">
<TITLE>RE: [Nagios-users] ANNOUNCE: Nagios Looking Glass 1.0.0#PRE is here!</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/plain format -->
<BR>
<P><FONT SIZE=2>Hi,<BR>
<BR>
> Subject: [Nagios-users] ANNOUNCE: Nagios Looking Glass 1.0.0#PRE is here!<BR>
<BR>
> It's been a long road the last couple of weeks, but Nagios Looking Glass<BR>
> 1.0.0#PRE is *now out* for public beta-testing.<BR>
<BR>
I do not want to sound rude but could you please consider making it a bit<BR>
more sucure before you name it 1.0?<BR>
<BR>
if (isset($_GET['fid']))<BR>
{<BR>
// check if we have already given a query string to $ServerFeedURL<BR>
if (strpos($ServerFeed_URL, "?") === false)<BR>
{<BR>
$ServerFeed_URL = $ServerFeed_URL . "?fid=" . $_GET['fid'];<BR>
} else {<BR>
$ServerFeed_URL = $ServerFeed_URL . "&fid=" . $_GET['fid'];<BR>
}<BR>
}<BR>
<BR>
In general it is not a good idea to pass untested variables into an url.<BR>
<BR>
Best regards,<BR>
<BR>
Hans Wolters</FONT>
</P>
</BODY>
</HTML>