News for hackers. Stuff that matters.
Re:I think tumblr has a huge security hole by bluesnowmonkey on Saturday March 19, 2011 @12:23PM (#2343949)
Exactly right. There's no reason for a config file (or any of the setup code) to be writing output. A good way to force this is by immediately starting an output buffer with a callback that returns nothing, then calling ob_end_clean() after setup is complete.

There are no comments on this comment yet.