extracting field data from FormTools2.0.5

[Hannes]

Hey Bill,

ft_api_load_field:

It assumes that a variable name can be found in GET, POST or SESSIONS (or all three)

"backdoor":

Code:

mysql_connect ( "localhost", "user", "password" );
mysql_query("SET NAMES 'UTF8'");
mysql_select_db ( "formtools" );
$result = mysql_query("SELECT `field` FROM `ft_form_1` WHERE `otherfield`="condition");
if(mysql_num_rows($result) == 0){
$errors[] = "field";
}
mysql_close;

Hope it helps.

Cheers,
Hannes