On 25/08/06, Timwi <timwi(a)gmx.net> wrote:
The kinds of webmasters we are talking about here will
assume that you
can never fire a given GET URL if you never see a page with a link to it
on it.
(Which is still a damn stupid assumption to make)
Not as bad as the ones who allow elementary SQL injection, etc. etc.
There's probably still hundreds of thousands of web sites out there
with basic flaws in. :)
Rob Church