View Single Post
Old 09-17-2011, 03:24 PM  
DWB
Registered User
 
Industry Role:
Join Date: Jul 2003
Location: Encrypted. Access denied.
Posts: 31,779
Quote:
Originally Posted by raymor View Post
On a related note, if you stick with a custom one, beware any script that reads a video from disk and feeds it to the browser. They almost always have the same three bugs and two of those are significant security bugs. Any time I see something like video.php?file=somechick.wmv I immediately know how I can take control of the server.
Ray, you should offer a security audit service where you point out to the site owner any vulnerabilities you find. Most of us don't know such things.
DWB is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote