Typically, these files are not web accessible. Problem solved. | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

petervandijck on March 19, 2011 | parent | context | favorite | on: I think tumblr has a huge security hole

Typically, these files are not web accessible. Problem solved.

russss on March 19, 2011 [–]

This bug was nothing to do with the file being web accessible. If you miss the opening <?php tag out in any file, regardless of whether it's in the web root, it will get printed straight out to the browser.

jonhohle on March 19, 2011 | [–]

But you would never `include()` a PEM file.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact