Re: Simple script to Monitor LVS via Web

[Malcolm Turnbull <malcolm@xxxxxxxxxxxxxxxx>]

That's why PHP no longer has register globals defaulted!
And also why you lock down your admin ip address by source ip.
My code has this vulnerability, but I'm not sure a helper app would be 
any more secure (sudo is a helper app.)
>   
> > <? $cmd="sudo /sbin/ipvsadm -L ". $dns_flag; passthru($cmd); ?>
> >     
> Whoa.
>
>
>
> eg: http://example.com/script.php?resolve_dns=1&dnsflag=;rm+-rf+/
>
>
>