Posted by Rik on 02/23/07 04:39
Steve <no.one@example.com> wrote:
> find a server that parses all documents via php instead of by extension,
> ....
>
> it's not hard to hack any site...it just takes a bit of knowledge and
> some desire.
And in this case, both an insane webserver setting and a either no or a
bogus check on files after upload... Usually it would be much, much harder.
--
Rik Wasmus
Navigation:
[Reply to this message]
|