In August 2007 a hacker found a way to expose the PHP source code on facebook.com. He retrieved two files and then emailed them to me, and I wrote about the issue:
http://techcrunch.com/2007/08/11/facebook-source-code-leaked/
It became a big deal:
http://www.techmeme.com/070812/p1#a070812p1
The two files are index.php (the homepage) and search.php (the search page)
| import java.util.HashMap; | |
| import java.util.HashSet; | |
| import java.util.LinkedList; | |
| import java.util.Map; | |
| import java.util.Set; | |
| public class Lab2 { | |
| public interface Regex { | |
| <T> T accept (Visitor<T> v); | |
| } |
| #!/bin/bash | |
| # WebSocket shell, start & browse to http://<Host>:6655/ | |
| # Requires bash 4.x, openssl. | |
| # Author: [email protected] (which isn't me, apk) | |
| coproc d { nc -l -p 6656 -q 0; } | |
| nc -l -p 6655 -q 1 > /dev/null <<-ENDOFPAGE | |
| HTTP/1.1 200 OK | |
| <html><head><script language="javascript"> | |
| var url = location.hostname + ':' + (parseInt(location.port) + 1); |
