On Mon, 13 Nov 2000 19:14:48 -0700, Space Dude wrote:
>Ok, I suppose that I should just write a script for grep for #write>before rendering, huh?
No. Even if the attacker can only open a file for writing but not
actually write something to it, he can still create it or delete its
contents.
hp
--
| | | hjp### [at] wsracat | -- Lutz Donnerhacke in dasr.
__/ | http://www.hjp.at/ |