[32970] in bugtraq
RE: php-ping: Executing arbritary commands
daemon@ATHENA.MIT.EDU (Golden_Eternity)
Tue Dec 30 13:50:55 2003
From: "Golden_Eternity" <bugtraq@bhodisoft.com>
To: "ppp-design" <security@ppp-design.de>, <bugtraq@securityfocus.com>,
<full-disclosure@lists.netsys.com>
Date: Mon, 29 Dec 2003 14:45:48 -0800
Message-ID: <EOEGLIKIMNJIPFEJADFFAENACAAA.bugtraq@bhodisoft.com>
MIME-Version: 1.0
Content-Type: text/plain;
charset="US-ASCII"
Content-Transfer-Encoding: 7bit
In-Reply-To: <3FF03F5C.3060306@ppp-design.de>
> Temporary-Fix
> -------------
> Replace
> If ($count > $max_count)
> with
> If ($count > $max_count && !is_numeric($count))
Shouldn't that be '||' instead of '&&'?
-G_E
