4 ms·
Holy shit! Look at this! This is hilarious! https://github.com/bratliff/engconf/blob/0b8f003edc5f5d25fe1feecd9f39d107958ddd11/staging/wp-content/plugins/ezpz-on
by fjcaetano 13y ago
Holy shit! Look at this! This is hilarious! https://github.com/bratliff/engconf/blob/0b8f003edc5f5d25fe1feecd9f39d107958ddd11/staging/wp-content/plugins/ezpz-one-click-backup/functions/ezpz-archive-cmd.php https://github.com/bratliff/engconf/blob/0b8f003edc5f5d25fe1...
- krapp 13y agoOh. And it's for wordpress. Isn't that just fucking wonderful. I would guess looking at the age of the account and the complete lack of documentation that it's a personal project he never really intended to get much scrutiny. I'm sure if someone looked at my github they could find some bad code too. Not that bad though. Edit - made an issue.
- spyder 13y agoAnd it has been already exploited: http://wordpress.org/support/topic/plugin-ezpz-one-click-backup-possible-security-flaw http://wordpress.org/support/topic/plugin-ezpz-one-click-bac...