Re: potential solution to user streams + allow_url_include=off
| From: | Cristian Rodriguez | Date: | Fri, 18 May 2007 23:47:05 +0000 |
| Subject: | Re: potential solution to user streams + allow_url_include=off | ||
| References: | 1 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-29529@lists.php.net to get a copy of this message | ||
2007/5/18, Greg Beaver <greg@chiaraquartet.net>:
<?php include $_GET['dumb']; ?>What about permanently removing this (mis) "feature" ?? , Im yet to hear any valid reason or example to continue to permit this remote include thingy, all examples I have seen are bogus and broken.. does anyone really think there are valid use cases ? (note that Im talking about include* and require* only ;) )