Re: Variable post as array
| From: | Daniel Brown | Date: | Wed, 05 Mar 2008 16:18:36 +0000 |
| Subject: | Re: Variable post as array | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-271030@lists.php.net to get a copy of this message | ||
On Wed, Mar 5, 2008 at 4:58 AM, Pieter du Toit <pieter@lpwebdesign.co.za> wrote:
And unless you have your (Apache|IIS|etc.) web server set to
disable direct-access and/or web serving of *.inc files, you should
change these to *.php or *.inc.php files ASAP. Especially the first.
You're looking at a potentially severe security vulnerability there,
depending on what userpass.inc contains (at which I can take a guess).
> <? include ("userpass.inc"); ?>
> <? include ("body_begin.inc"); ?>
> <? include ("body_end.inc"); ?>
--
</Dan>
Daniel P. Brown
Senior Unix Geek
<? while(1) { $me = $mind--; sleep(86400); } ?>