Re: [tlug] Clamav reports a virus: Exploit.Gif.PHPembedded

["Hung Nguyen Vu" <vuhung16plus+shape@example.com>]

On Fri, Jun 6, 2008 at 1:45 AM, Stephen J. Turnbull <stephen@example.com> wrote:
>
> Hung Nguyen Vu writes:
>
>  > What is the name of exploits like this?
>
> "Innocent Until Proven Guilty"
What should I do when I see a man with a gun entering my house?

>
> AFAICT, PHP has the same security problem that Microsoft applications
> do.  It will try to execute anything unless the programmer takes
> explicit action to disable it.
Actually that is the reason why programmers like me have a job :)
We get paid for doing it.

I still don't understand whyPHP doesn't check the input more carefully.
It is quite fundamental.




--
Best Regards,
Nguyen Hung Vu ( Nguyễn Vũ Hưng )
vuhung16plus{remove}@example.com , YIM: vuhung16
Japan through an eye of a gaijin:
http://www.flickr.com/photos/vuhung/tags/fav/