This is a problem for any application that has a web interface for writing to the filesystem. You can perform a similar attack against Wordpress through the tem

This is a problem for any application that has a web interface for writing to the filesystem. You can perform a similar attack against Wordpress through the template and plugin editors, for example. Does anyone know if VB enables the plugin editor functionality by default / if there's a way to disable it other than chmodding the files on the filesystem (ie: by defining a constant)?