Hacker News new | ask | show | jobs
by DigitalSea 4779 days ago
Wow, that's a pretty serious flaw right there. Pretty messy looking code too, this part in particular: if($city_get == "Delhi-ncr")$city_get = "delhi-ncr"; — would it not have been easier to use strtolower instead? This doesn't appear to be related directly to the Groupon site but rather a special deals portal that is a subdomain of the Groupon India website. I tried doing this on other parts of the site and only http://getaways.groupon.co.in/ seems to be affected.

Aside: I didn't know Groupon was running on PHP, I always assumed it was built in something else.