Conversation

Notices

1. grmpyoldman (Tysk Gamlingen) 28. Chaos Communication Congress (28c3) group , evan

   O_o !28c3 #misc #hacked "somethings wrong with my favorite twitter clone?" linking to install.php on identi.ca? ur1.ca/71gth cc @evan

   about 5 months ago from web
   • Remote profile options...
     evan

     Interesting! It's not possible to do anything with that, but it looks bad. So, I removed it from our on-demand sites. Thanks for the alert!

     about 5 months ago
   • grmpyoldman (Tysk Gamlingen) evan

     @evan Just as a question… have you checked, if some1 changed anything in the file before removal? last access? anything else?

     about 5 months ago
   • Remote profile options...
     mmn evan

     "if (!is_writable($config) || filesize($config) > 0) { (...) $pass = false" <- that ensures "handlePost" is never calle…

     about 5 months ago