This post originated from an RSS feed registered with PHP Buzz by Pure-PHP. Original Post: Security matters, specially for PHP-Magazine, some source code publicly accessible! Feed Title: Pure PHP - PHP unconventional Feed URL: http://www.iran-fun.com/ Feed Description: Unconventional methodes to boost php apps Latest PHP Buzz Posts Latest PHP Buzz Posts by Pure-PHP Latest Posts From Pure PHP - PHP unconventional

It is not an April joke! I read frequently PHP-Magazine (http://php-mag.net http://php-mag.de), Yesterday I discovered some interesting things, because I was able, to read some source code and they are still publicly available. I don’t want to write, how I could read the source code, because there are always some people out side, who want play with it. Very important, they have register_globals on. I hope, they fix it as soon as possible.

I found out, that they use the Powerslave content management system, and they have installed it in this directory. /var/httpd/powerslave. As I surfed to site of the company, who has written Powerslave, I found out, that many sites in Germany use this content management system. I hope, they fix it, as soon as possible.