Howard, <br><br>This would be good reading for you...<br><br><a href="http://en.wikipedia.org/wiki/Null_character">http://en.wikipedia.org/wiki/Null_character</a><br><br><div><span class="gmail_quote">On 2/14/07, <b class="gmail_sendername">
howard chen</b> <<a href="mailto:howachen@gmail.com">howachen@gmail.com</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
On 2/14/07, Matt Wood <<a href="mailto:matt@woodzy.com">matt@woodzy.com</a>> wrote:<br>> It has to be relative because of smarty. And some smarty installations have<br>> a "secure mode" (like <a href="http://lifetype.net">
lifetype.net</a>) that won't allow access out of a<br>> specified sandbox.<br>><br>> The real major danger I see is revealing the db password. And if your shell<br>> pass happened to be the same as that password, you are toast.
<br>><br><br>hello,<br><br>isn't that the template must have the extension ended with .template?<br>so you can only load any template you want...<br><br>so how to load other non-template file such as config.properties.php
?<br><br>p.s.<br>if you think it is too sensitive to tell right now....remember to<br>provide the cause maybe after sometimes which most people have fixed<br>this bug. :)<br><br>this is useful for other projects as well.<br>
_______________________________________________<br>pLog-svn mailing list<br><a href="mailto:pLog-svn@devel.lifetype.net">pLog-svn@devel.lifetype.net</a><br><a href="http://limedaley.com/mailman/listinfo/plog-svn">http://limedaley.com/mailman/listinfo/plog-svn
</a><br></blockquote></div><br>