i was just wondering whether any of you guys out there knew of a way to obtain a page's php code. i know you can use XSS to exploit weak include files, but i was wondering what other means there are. for educational purposes.

well, first i suggest you learn to not tripple post.

sorry about that. had a bit of a browser-js problem. any ideas btw?

Maybe one of the first contents for a FAQ?

Read: http://www.bright-shadows.net/tutorials/tbs_wiwa.txt

You would have to be pretty thick to publish a tutorial when you site has the same weaknesses

Why?

Who says that this site is exploitable

tbs

self confidence is very important... as well as talent of persuading people

i'm pretty sure it is.

yet i hope it will be less easy as the average site ..

Everything we can influence should have a high standart of security. Nevertheless we are not immune against some types of attack.