note 29711 added to function.include
| From: | bart_the_mad at poczta dot onet dot pl | Date: | Sat, 22 Feb 2003 18:25:23 +0000 |
| Subject: | note 29711 added to function.include | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-44350@lists.php.net to get a copy of this message | ||
in rsponse to 'tom at game-fx dot com 01-Feb-2003 01:05'
I would advise NOT to try this. Why ?
index.php?page=/etc/passwd
index.php?page=/my/secret/passwords.php
And MANY other bug's and exploits can be created ( like executing a PHP script that the user
submited in , for an example , comment to an article )
--
http://www.php.net/manual/en/function.include.php
http://master.php.net/manage/user-notes.php?action=edit+29711
http://master.php.net/manage/user-notes.php?action=delete+29711
http://master.php.net/manage/user-notes.php?action=reject+29711