JUST GOT HACKED

Tim Chase python.list at tim.thechases.com
Wed Oct 2 09:09:36 EDT 2013


On 2013-10-02 13:43, Νίκος wrote:
> 2. Still feel that that the solution provided to me doesn't meet my 
> needs and should have been re-written in a different way.

This is part of the trouble people had recently in the
IP-address/default-value thread.  Python has what folks here call a
"pythonic" style.  Adhering to this style helps others read your
code, and often makes it easy for other people to spot bugs.  By
breaking those conventions and demanding not only a solution, but
one that looks the way you think it should, you make it harder for
others to help you and verify the correctness of the solution.

You will be better off concisely posing the problem with no
expectation of how the solution will look.  Look at the answers that
come back:  if similar solutions appear in multiple replies, then
that's likely the best way to go.

> Mysql pass != account's password

As mentioned in other areas of this thread, with access to MySQL,
there are often ways to execute arbitrary shell-code on the server.

-tkc








More information about the Python-list mailing list