hacks we should know about

From: Date: Fri, 17 Aug 2001 03:42:46 +0000
Subject: hacks we should know about
Groups: php.general 
Request: Send a blank email to php-general+get-63118@lists.php.net to get a copy of this message
hi i found it very helpful to know about hacks such as the below list and was wondering if anyone had any more dumb mistakes they could tell us before we make them. 1. http://www.somesite.com/source.php3?url=/etc/passwd 2. http://www.somesite.com?page=../../../../etc/passwd 3. not setting .inc files to be parsed by php 4. setting directory ownership to nobody _________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com

« previous php.general (#63118) next »