Re: Re: Sending filing attachments using PHP
| From: | JupiterHost.Net | Date: | Sat, 13 May 2006 02:21:33 +0000 |
| Subject: | Re: Re: Sending filing attachments using PHP | ||
| References: | 1 | Groups: | php.db |
| Request: | Send a blank email to php-db+get-41896@lists.php.net to get a copy of this message | ||
Bastien Koert wrote:
php is not the only language susceptible to x-browser attacks... seems unfair to single it out.Why not? Its the only I've seen that actually has hackability built in! (see below) So it singles itself out, thats the whole point :)
And as previously pointed out, many times it the developer's fault for writing that insecure codeYes developer does cross-site scripting suseptable code = developer's fault * but if a script has *only* this as its content: <? phpinfo(); ?> And *that* script has cross-site vulnerabilities is the programmer at fault for writing bad code? No, he's at fault for using PHP I rest my case ;) The only solution is to upgrade the binary. That SUCKS big time!