Any ideas why this happened? Seems like a huge security flaw.

Check out LxC URL Shortener
Let me know if you like it.

Thank you.

/*******************************************/
function ConvertToArbitraryBase($Str, $Chars)
/*******************************************/
{
/*
Converts from a decimal string to an arbitrary-base string
*/

if (ereg(‘^[0-9]+$’, $Str))
{
$Result = ”;

do
{
$Result .= $Chars[bcmod($Str, strlen($Chars))];
$Str = bcdiv($Str, strlen($Chars));
}
while (bccomp($Str, ’0′) != 0);

return strrev($Result);
}

return false;
}

e.g. free.url/a43rad?temp=111 will result into something like http://www.hireplug.com/opening/5?temp=111. The parameter preservation as in temp=111 here.

It would be great if we can pass these parameter to the target URLs.
I’m not much sure about this. Any ideas?