Potential File Inclusion exploit?

Orc · 10-01-2008, 04:51 PM

PHP Code:


			
    foreach ( glob('*.class.php') As $val )

    {

        

        include($val);

        

    }

Does this have any potential?

Salathe · 10-01-2008, 05:31 PM

Only if you're silly enough to let an attacker write files ending in .class.php in the current working directory.

Orc · 10-02-2008, 04:17 AM

Quote:

Originally Posted by Salathe

Only if you're silly enough to let an attacker write files ending in .class.php in the current working directory.

I'll just prevent that then.