Re:I think tumblr has a huge security hole
by bluesnowmonkey on Saturday March 19, 2011 @12:23PM
(#2343949)
Exactly right. There's no reason for a config file (or any of the setup code) to be writing output. A good way to force this is by immediately starting an output buffer with a callback that returns nothing, then calling ob_end_clean() after setup is complete.
[ Parent
| on HN ]
There are no comments on this comment yet.