tedd wrote: > > The script will then include > > http://www.badserver.com/badscript.txt?dummy=script.php > > I still don't see how "badscript.php" can be uploaded into > example.com's site in the first place PHP sends a request to badserver.com for badscript.txt, and the content of the response is included just as if it were the content of a local file. Hope that helps. Chris -- Chris Shiflett http://shiflett.org/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
