Posted by Chung Leong on 12/06/05 07:13

bio-anomoly wrote:
> I was just giving my PHP a bit of a spin, and I noticed that opendir
> opens EVERYTHING, and unix commands can be executed with the ' grave,
> like this 'ls -lR /'.
>
> Can someone quantify how slack this is? Is it normal practice amongst
> large servers?
>
> When the security is this crap, what else can happen?

What else can happen? Plenty. Who needs shell commands when PHP itself
is fully capable of destroying itself? The ability to include a remote
script, now that's freaking crazy.

[Back to original message]