Hello Dr Byte

I have completed your new secirity bug fix:

http://www.zen-cart.com/forum/showthread.php?t=43579

However could I confim that where you mention

should be several lines:
Code:
$sql = "SELECT *
FROM " . TABLE_PAYPAL_SESSION . "
WHERE session_id = :sessionID";
$sql = $db->bindVars($sql, ':sessionID', $session_stuff[1], 'string');

There is only 4 lines of code

Also how can we test these fixes..... what screens should we use?

Yours Blushfashions