Hacker News new | ask | show | jobs
by Buge 4089 days ago
Like the article says, they make sure the command to system is one of their php files before running the system command.