Emil Lerner

implement attack that uses only .php endings

6

This is attempt to fix #1. The attack works (but it needs POST requests now). However, I haven't came up with any detection method which is short enough.