That's probably a good thing: https://www.example.com/secure/shop.php?page=/etc/passwd <?php include($page); ?> :-) Thank you, Micah Gersten onShore Networks Internal Developer http://www.onshore.com Daniel Brown wrote: > On Thu, Oct 2, 2008 at 12:57 PM, Jim Lucas <lists@xxxxxxxxx> wrote: > >> so long, farewell, bye bye.... >> > > If you say so. Do you realize how many websites are going to > break now? ;-P > > https://www.example.com/secure/shop.php?page=creditcardinfo.php > <?php > include($page); > ?> > > -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php