And to make things more interesting:

Assumptions:
- shared hosting
- User1's directories have 755 permission (quite common)

1) User1 creates his installation and life's good.
2) User2 (bad one) does `locate symfony`. Interesting, he thinks.
3) User2 does:
cat > /home/user1/sf/symfony << "EOF"
#!/usr/bin/env php
<? print "you were hacked"; ?>
EOF

4) User1 wants to create a new module by running his local copy of
symfony script. After a while he finds out that his home directory is
wiped out.

-- 
kjk

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"symfony developers" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/symfony-devs?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to