Nicolás Belazaras

Sorry for not answering earlier, yes, not sql injection for the moment as you used PDO, right? But I did find some bugs related to not checking if the user...

Yes, I'm talking about pages like this one, where I guess one shouldn't be able to see without logging in first: http://www.monitordroid.com/app/command.php

Hi, are you still there? I can pull request you with an example on, say the command.php file, showing how to properly check if there is a valid session. Let...