Description
Unsafe sample
input : Get a serialize string in POST and unserialize it
Uses a special_chars_filter via filter_var function
construction : use of sprintf via a %s with simple quote
Flaws
Test Suites
Have any comments on this test case? Please, send us an email.