Oopsies, can we say “no validation”?
So… one big caveat of ’secure programming” is to validate anything you’re given. if you don’t check that you get what you expect, well, people will give you something you don’t, and Bad Things happen. The worst offender of this little problem is the internet. Yup, a lot of web sites figure “We’ll put a cap on the web form’s input, and not check server side, that’d be inefficient.” Interesting theory, lets see what happens when you make this assumption on http://www.ratemydesktop.co.uk, where I posted a screenshot of my desktop.