Ebuyer – maxing out the result limit

This might be useful to someone, somewhere, out there.

Those who’re into tinkering with things they shouldn’t will notice that Ebuyer’s search pages include a “limit” GET variable in the results page URL. The upper limit appears to be 30, but going negatively causes a different kettle of fish:
http://www.ebuyer.com/search?q=a%25&x=0&y=0&limit=-3000
(That URL is not for the feint hearted!)

It makes one wonder, is there a little bit of sanitization fail?

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.