Eval($_POST[cmd])

Re:Eval($_POST[cmd]) by DrinkWater on Wednesday May 20, 2015 @10:34AM (#9576569)

So what? What is the point of this? Is this again one of these "php developers are 'special' people"-posts?

[ Parent | on HN ]

Re:Eval($_POST[cmd]) by brevis on Wednesday May 20, 2015 @10:44AM (#9576641)

I hope it will make people once again check their code.

[ Parent | on HN ]

Re:Eval($_POST[cmd]) by jayzalowitz on Wednesday May 20, 2015 @10:40AM (#9576601)

Also, one could argue that if you lock down servers properly, something like this could be used for instruction passing between servers/datacenters/etc... its not a good argument, but its a way of doing things.

[ Parent | on HN ]

Re:Eval($_POST[cmd]) by timboslice on Wednesday May 20, 2015 @10:40AM (#9576600)

I'm guessing he's just showing us the dork (search phrase) to find these vulns and outline how stupid... errr special people can be

[ Parent | on HN ]

Re:Eval($_POST[cmd]) by agumonkey on Wednesday May 20, 2015 @10:43AM (#9576633)

Some things are utterly weird. A jpg file with php code is not idiocy, it's either security learning or plain hackery. Reminds me of my beloved wordpress days.

[ Parent | on HN ]