News for hackers. Stuff that matters.

A comment on You thought that “This should never happen was bad”? search – eval($_GET).

Re:You thought that “This should never happen was bad”? sear... by ams6110 on Thursday March 31, 2016 @02:13PM (#11399268)
Years ago I worked on a web app that had a "hidden" page that would do something like:

  SQL.exec($_GET['sql'])
Was used for support to be able to access customer data to be able to reproduce bugs, etc.
[ Parent | on HN ]

There are no comments on this comment yet.