note 29711 deleted from function.include by stone
| From: | stone@php.net | Date: | Wed, 07 May 2003 22:21:30 +0000 |
| Subject: | note 29711 deleted from function.include by stone | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-47655@lists.php.net to get a copy of this message | ||
in rsponse to 'tom at game-fx dot com 01-Feb-2003 01:05'
I would advise NOT to try this. Why ?
index.php?page=/etc/passwd
index.php?page=/my/secret/passwords.php
And MANY other bug's and exploits can be created ( like executing a PHP script that the user
submited in , for an example , comment to an article )