[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Full-Disclosure] RE: php-ping: Executing arbritary commands
- To: "ppp-design" <security@ppp-design.de>, <bugtraq@securityfocus.com>, <full-disclosure@lists.netsys.com>
- Subject: [Full-Disclosure] RE: php-ping: Executing arbritary commands
- From: "Golden_Eternity" <bugtraq@bhodisoft.com>
- Date: Mon, 29 Dec 2003 14:45:48 -0800
> Temporary-Fix
> -------------
> Replace
> If ($count > $max_count)
> with
> If ($count > $max_count && !is_numeric($count))
Shouldn't that be '||' instead of '&&'?
-G_E
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html