Re: Worm "Santy.C" problem for TikiWiki?
Just to clarify.... based on the given info about the worm:
"It targets ANY .PHP page/script vulnerable to a remote file inclusion
(programming) flaw these vulnerabilities are independent from the PHP version, they result from common coding mistakes"
TW does, in fact, have these "common coding mistakes" in there by default?
Is there a certain string I can grep for to try and help commit some fixes?
Or, damian, do you mean that if a user took the codebase and added their own custom code/plugins, they can open themselves up to attack?
;){kind=link}
;){kind=link}