Based on what I am reading in this thread, my assumption is that this hack does not actually look at the file types being uploaded prior to zipping them up into an archive? Even if this is true it's still a great hack.
I still think some overview of general .zip security considerations may be in order, even if this particular hack doesn't fundamentally alter anything.
|