Can arbitrary code run in a server if someone's know just the MySQL password?

Denis McMahon denismfmcmahon at gmail.com
Wed Oct 2 12:02:28 EDT 2013


On Wed, 02 Oct 2013 17:46:08 +0300, Νίκος wrote:

> But i need to know what happened and how this .html file got uploaded.

The html file started out in an editor on on another machine, and was 
created by someone typing at the keyboard. It was then saved to hard disk 
as a file. The other machine then read the file into memory, and then 
sent it as a byte stream to the tcp/ip stack, where it was broken down 
down into packets which travelled across the tcp/ip network onto your 
server. Your server then re-assembled the packets into a byte stream 
which filled a block of memory, and then wrote the contents of that block 
of memory to disc as a file.

(This explanation may contain some assumptions.)

-- 
Denis McMahon, denismfmcmahon at gmail.com



More information about the Python-list mailing list