Re: [Full-disclosure] Critical PHP bug - act ASAP if you are running web with sensitive data

["Slythers Bro" <slythers@xxxxxxxxx>]

<?php
   $host = "127.0.0.1";
   $user = "sqluser";
   $pass = "sqlpass";

 .....

   $foobar=html_entity_decode($_GET['foo']);
   echo $foobar;

?>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/