RE: [cobalt-users] <PHP Off Topic>

["Jim Carey" <ozbcoz@xxxxxxxxxxxxxxxx>]

> > >
> > Had the same thing - using PHPNuke and had a module in there 
> that could be
> > passed a file name and it would display that file. No checks to 
> see if the
> > file name was below document root. A kind gentleman in Russia send me a
> > display of my /etc/passwd file that he had sourced from this module :-)
> 
> Did you close the hold in phpnuke or in php itself?
> 
> Mike
> >
>

phpnuke - wouldn't have the faintest idea how to stop PHP from doing it :-)

Jim Carey
www.OZbcoz.com discount domain registration
www.iluvoz.com affordable hosting services