Oh dear PHP developers – search for “file $_GET” on GitHub

github.com

3 pointswebmonkeyuk2 comments

Oh no.... the worst:

`echo file_get_contents($_GET['file']);`

Sometimes you think you're being really clever and efficient and ... you're just not.