note 95732 deleted from function.file-get-contents by danbrown
| From: | danbrown@php.net | Date: | Tue, 19 Jan 2010 01:58:22 +0000 |
| Subject: | note 95732 deleted from function.file-get-contents by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-165098@lists.php.net to get a copy of this message | ||
Note Submitter: swnpnt at gmail dot com
----
If the content of the file has <?php ?> tags, then it's executed as code. Majorly unsafe
for service providers anonmyous scripts download and execute other anonymous scripts from anonymous
servers. Especially, when anonymous code is shell code. Currently, there's a joomla + linux
kernel exploit using this to install rootkits on web hosts.