Little Info: I am not a web developer, I am a beginner to php and sql. Trying to learn in my free time.
I was examining a web site on a remote server and i saw something like;
First, I tried to log in my credentials and there was no problem. After that i tried to login with false credentials to see what happens.
And I was able to find the link on console.
Is this the right way for security? I could be gravely mistaken but I mean i think now i know which parameters ($username and $password) they store in php code.
If i am right, can this lead to a sql-injection? If so which methods can be used to prevent this.
I forgot to mention that site is HTTP
Any lead is appreciated. Thanks for your time.