note 29711 added to function.include

From: Date: Sat, 22 Feb 2003 18:25:23 +0000
Subject: note 29711 added to function.include
Groups: php.notes 
Request: Send a blank email to php-notes+get-44350@lists.php.net to get a copy of this message
in rsponse to 'tom at game-fx dot com 01-Feb-2003 01:05' I would advise NOT to try this. Why ? index.php?page=/etc/passwd index.php?page=/my/secret/passwords.php And MANY other bug's and exploits can be created ( like executing a PHP script that the user submited in , for an example , comment to an article ) -- http://www.php.net/manual/en/function.include.php http://master.php.net/manage/user-notes.php?action=edit+29711 http://master.php.net/manage/user-notes.php?action=delete+29711 http://master.php.net/manage/user-notes.php?action=reject+29711

« previous php.notes (#44350) next »