The purpose of this article is not to teach you how to hack
sites, but to show you some scenarios that may reveal to you how
vulnerable your existing site may be, or will hopefully help you
prevent any future sites from having these vulnerabilities.
Closely related to hidden field manipulation, buffer overruns
are engineered in a similar fashion; any text input field with a
maxchar=n property can be used to potentially shut down the
server. The source code can be accessed, and the maxchar
property removed. The hacker then enters, say, 10,000 ones and
submits the form. What happens next? The server shuts down,
taking your business with it. A semi-secure solution to this
would again be to encrypt any HTML form source. A better
solution would be to allocate memory dynamically, therefore not
presetting the memory buffer to a certain size, or writing a
function that checks the length of the input before passing the
results to the server. If the input exceeds the memory
allocation, simply pass back a NULL value. A