The Spider of Doom

If you ever get frustrated by trying to convince people to build their
web pages properly, you could try pointing them at this:

http://www.thedailywtf.com/forums/65974/ShowPost.aspx

--
Stephen Poley

http://www.xs4all.nl/~sbpoley/webmatters/

Stephen Poley <sbpoleySpicedHamTrap (AT) xs4all (DOT) nl> wrote:

If you ever get frustrated by trying to convince people to build their
web pages properly, you could try pointing them at this:

http://www.thedailywtf.com/forums/65974/ShowPost.aspx

That primarily demonstrates the poor skills of the author of the CMS,
not of the client. Clients shouldn't be expected to be knowledgable
about security, the developer has no such excuse.

A developer that allows a client instruction to result in a system that
can be compromised in this way has failed in one of his primary tasks;
preventing clients from harming themselves.

From the story I gather that the developer still hasn't learned this
lesson, even after this faux pas.

--
Spartanicus