note 93482 deleted from function.include by danbrown

Note Submitter: Anonymous ---- @Richard (rjw201 at cam dot ac dot uk) Never, ever, ever, EVER encourage people do use your method and in the future, do a little research before you post. See, what you have there is one of the most unprofessional and weak methods of avoiding remote injection ever documented and this is why: First of all, adding a static file extension may cause issues on the developer side and second, it can be simply bypassed by a null byte injection. Here is a link to the Wikipedia entry on the null byte/character. [http://en.wikipedia.org/wiki/Null_character] It reveals in detail of how this character may be used to attack the victims site. To cut to the chase, you're specifically looking for the [Security exploit: Poison null byte] section.