[thelist] is this usual

Morgan Kelsey morgan at morgankelsey.com
Fri Feb 28 14:30:01 CST 2003


andrew,

> I just stumpled across it and did think it was the php equivalent but is
asp so
> I didn't know whether to inform the site.
>
> So I guess they know its there and there is no problems.
>

some of that data is a little sensitive though.

revealing the physical file structure, decalring the OS, web server name
and version number, etc etc

all these items are little security clues that a rambunctious
script-kiddie would be copying and pasting to a text file. it's best to
not display that info on a live site.


nagrom

http://morgankelsey.com






More information about the thelist mailing list