note 23937 rejected from function.copy by erica
| From: | erica@php.net | Date: | Fri, 06 Sep 2002 18:51:24 +0000 |
| Subject: | note 23937 rejected from function.copy by erica | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-36259@lists.php.net to get a copy of this message | ||
to nick@innousa.com, that is seriously insecure way to do it. Someone could execute commands on your
box under the user that the HTTPD server is running as. SEE:
cp -R <directory name>
<new name> | rm /etc/passwd - or whatever, but notice the | pipe charachter