bugtraq - Re: RFI In Script FlashChat

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: 28 May 2007 18:32:57 -0000
From: the.tiger100@...il.com
To: bugtraq@...urityfocus.com
Subject: Re: RFI In Script FlashChat_v479

this is not rfi
the f_cms = INC_DIR
so  u cant include it  because it have a value and u cant include this value

$f_cms = INC_DIR . 'cmses/' . $GLOBALS['fc_config']['CMSsystem'] . '.php';
        if( !file_exists($f_cms) || !is_file($f_cms) )
            require_once(INC_DIR . 'cmses/statelessCMS.php');//free for all users
        else
            require_once( $f_cms );

so f_cms = INC_DIR --->CAN'T INCLUDE :D