I currently have a file uploader script on my site and I allow rar and zip files to be uploaded but to my amazment i saw a lot of rar files being uploaded and then saw that they were being extracted revieling php files.
Luckily for me I stop the read access of php scripts in my upload directory so the user was not able to run these php scripts.
What has me stumped is how the user managed to extract these rar files?
does any one know how they might have done that?
Firstly I have no files anyway on my webserver that has unrar functionality.