Cable Forum - View Single Post

**Paul** · 18-05-2005, 22:38

So, the programmer who wrote the script made it include any file in the supplied parameter (local or remote) and hence execute it - basically allowing anyone to run anything on the server

- anyone who does such a stupid thing should never be allowed near code near again.

18-05-2005, 22:38	#2
Paul Dr Pepper Addict Cable Forum Admin Join Date: Oct 2003 Location: Nottingham Age: 63 Services: Zen & YouFibre FTTP, Sky Q TV, Sky Mobile, Flextel SIP Posts: 31,334	Re: Safe PHP a Contradiction in Terms So, the programmer who wrote the script made it include any file in the supplied parameter (local or remote) and hence execute it - basically allowing anyone to run anything on the server - anyone who does such a stupid thing should never be allowed near code near again. __________________ Baby, I was born this way.