Posted by bio-anomoly on 12/06/05 06:15

I was just giving my PHP a bit of a spin, and I noticed that opendir
opens EVERYTHING, and unix commands can be executed with the ' grave,
like this 'ls -lR /'.

Can someone quantify how slack this is? Is it normal practice amongst
large servers?

When the security is this crap, what else can happen?

• Next in forum: Re: Session handling with memcache - faster?
• Prev in forum: Re: Yet another $_POST Problem
• Thread view: Terrible security on a large server

[Reply to this message]