in reply to Re: Phishing question
in thread Phishing question

Thanks for your time.

However, the file was written to document root directory and not the cgi-bin.

Replies are listed 'Best First'.
Re^3: Phishing question
by MidLifeXis (Monsignor) on Aug 25, 2011 at 13:25 UTC

    If you are running php scripts from that directory, it is a scripting directory. Additionally, the same statement can be made about any directory that a browser can access directly through the web server. Basically, if the web server can write anywhere you don't explicitly tell it to, it is a problem.

    --MidLifeXis