Re: Fwd: PhpSmsSend remote execute commands bug
| From: | Evan Nemerson | Date: | Wed, 30 Jan 2002 01:37:24 +0000 |
| Subject: | Re: Fwd: PhpSmsSend remote execute commands bug | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-82637@lists.php.net to get a copy of this message | ||
Good point, but I actually reccomend newbies subscribe to bugtraq. It really
opened my eyes to the world of cross-site scripting. Now I not only know how,
but do, write secure code.
If I saw a warning about a script either here or on bugtraq, I would
immediatly patch it- or at least shut down until it could be patched. It
would be useful...
"The probability that we may fail in the struggle ought not to deter us from
the support of a cause we believe to be just."
On Tuesday 29 January 2002 17:22, you wrote:
> > I'm think I'm going to start forwarding all the bugtraq
> > alerts for PHP scripts to this list. Any objections?
>
> Yes, if the author of the script isn't on the list it's useless
> unless someone wants to patch their script themselves. And if
> they're the kind of person who's inclined to do that, they'd
> most likely already be watching BugTraq.
>
> There's such a large possibility of crappily-written code out
> there, I don't know if its worth the traffic on this list
> given that it's usually newbies.
>
> J