I think tumblr has a huge security hole

Re:I think tumblr has a huge security hole by petervandijck on Saturday March 19, 2011 @08:35AM (#2343435)

Typically, these files are not web accessible. Problem solved.

[ Parent | on HN ]

Re:I think tumblr has a huge security hole by russss on Saturday March 19, 2011 @09:20AM (#2343518)

This bug was nothing to do with the file being web accessible. If you miss the opening <?php tag out in any file, regardless of whether it's in the web root, it will get printed straight out to the browser.

[ Parent | on HN ]

Re:I think tumblr has a huge security hole by jonhohle on Saturday March 19, 2011 @10:20AM (#2343638)

But you would never `include()` a PEM file.

[ Parent | on HN ]