note 93482 added to function.include

@Richard (rjw201 at cam dot ac dot uk) Never, ever, ever, EVER encourage people do use your method and in the future, do a little research before you post. See, what you have there is one of the most unprofessional and weak methods of avoiding remote injection ever documented and this is why: First of all, adding a static file extension may cause issues on the developer side and second, it can be simply bypassed by a null byte injection. Here is a link to the Wikipedia entry on the null byte/character. [http://en.wikipedia.org/wiki/Null_character] It reveals in detail of how this character may be used to attack the victims site. To cut to the chase, you're specifically looking for the [Security exploit: Poison null byte] section. ---- Server IP: 208.69.120.35 Probable Submitter: 213.180.108.117 ---- Manual Page -- http://www.php.net/manual/en/function.include.php Edit -- https://master.php.net/note/edit/93482 Del: integrated -- https://master.php.net/note/delete/93482/integrated Del: useless -- https://master.php.net/note/delete/93482/useless Del: bad code -- https://master.php.net/note/delete/93482/bad+code Del: spam -- https://master.php.net/note/delete/93482/spam Del: non-english -- https://master.php.net/note/delete/93482/non-english Del: in docs -- https://master.php.net/note/delete/93482/in+docs Del: other reasons-- https://master.php.net/note/delete/93482 Reject -- https://master.php.net/note/reject/93482 Search -- https://master.php.net/manage/user-notes.php