Researcher: Firewall Ref: http://www.milw0rm.com/exploits/2750 The code that is quoted in the milw0rm post appears in core.php without any includes or static definitions of $root beforehand. - Steve