Olivier Hill writes:
 > Are you suggesting that someone could wipe out your entire machine by
 > passing a remote script that would system('rm -rf /');?

It would "only" delete every file owned by the user that the webserver
runs as.  On my server, that's 1846 files, some of which I'm fairly
attached to.

 > There is no problems with the include() statement. The only thing
 > missing, is a <blink> tag in the docs ;)

If there were no problems, then why would a <blink> tag be needed?

-- 
--My blog is at     blog.russnelson.com         | If you want to find
Crynwr sells support for free software  | PGPok | injustice in economic
521 Pleasant Valley Rd. | +1 315-323-1241       | affairs, look for the
Potsdam, NY 13676-3213  |                       | hand of a legislator.

-- 
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to