note 93813 deleted from language.operators.execution by danbrown
| From: | danbrown@php.net | Date: | Wed, 30 Sep 2009 20:41:21 +0000 |
| Subject: | note 93813 deleted from language.operators.execution by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-161187@lists.php.net to get a copy of this message | ||
Note Submitter: pstdenis at gmail dot com
----
{$_GET['cmd']} is a HUGE security hole anyone can execute any command passed
a a query string to the script.