Bugtraq: Re: PHP security (or the lack thereof)

["Geo." <geoincidents () nls net>]

> I think that any ability of the (l)users to expose executables as web
> services threatens the security of the web server machine, irrespective of
> programming language.  (But I don't see how it threatens "the internet" --
> they can already connect their own misconfigured machine to the net
directly)

If I compromise your home machine, I've got one computer. If I compromise
some webserver that hosts several hundred websites I've got a whole lot more
options via all those exploits that require I lure you to my website. I also
have whatever those websites are (suppose half of them are stores that
process credit cards).

Geo.