I think tumblr has a huge security hole

Re:I think tumblr has a huge security hole by dexen on Saturday March 19, 2011 @10:19AM (#2343636)

You could do ob_start(); include '...'; ob_end_clean();, but it turns out that die() (say, in a custom error handler) () causes an implicit buffer flush. So it's not a foolproof solution.

[ Parent | on HN ]

Re:I think tumblr has a huge security hole by bluesnowmonkey on Saturday March 19, 2011 @12:28PM (#2343965)

You can attach a callback to the buffer to prevent that implicit flush.

    ob_start(function() {});

[ Parent | on HN ]

Re:I think tumblr has a huge security hole by dexen on Saturday March 19, 2011 @12:52PM (#2344044)

Thanks, I'll investingate and probably adopt it for my code :D

[ Parent | on HN ]

Re:I think tumblr has a huge security hole by KevBurnsJr on Sunday March 20, 2011 @04:56AM (#2345877)

Or register_shutdown_function - http://blog.kevburnsjr.com/php-fatal-error-500

[ Parent | on HN ]