Re: Re: [PHP] PHP Exploit via phpBB?
| From: | John Holmes | Date: | Wed, 22 Dec 2004 22:58:33 +0000 |
| Subject: | Re: Re: [PHP] PHP Exploit via phpBB? | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-205012@lists.php.net to get a copy of this message | ||
> From: John Nichel <jnichel@by-tor.com>
> http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=240513
wow... all this fuss because they ran urldecode() on something that was already decoded (and what
they do with the data after the fact, of course)...
---John Holmes...
UCCASS - PHP Survey System
http://www.bigredspark.com/survey.html