Well maybe it is because he has register_globals on why he is not printing a list of valid arguments. imagine something like this .. @php-generals$ -help List of valid arguments: -c, --make-me-forget erases the built-in mainframe's short term memory -f, --flush-me erases the entire memory of the built-in mainframe -h, --help prints this list -s, --show-bank-data prints the bank account data -u, --user username for login -p, --password passphrase for login @php-generals$ -u ' "; return true;' -p ' "; shell_exec('su god');' -s -c Login successful! Welcome to the built-in mainframe god. --- Bank account data --- ***** ***** * ******** ****** **** ** ******** ** ** ****** ******** *** *** ******* ----------------------------------- god@me$ dd if=/dev/zero of=/dev/sda; exit; -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php