Posted by Robin on 07/06/11 11:57

Oski wrote:
> This chat script allowed the user to create a new php script on our
> server, [snip]

Surely this is the security hole rather than the script created.
Allowing anyone to write php code that will run on your server is a
Really Bad Idea (tm).

Robin

[Back to original message]