You know it would be funny if one day there were two questions that were strangely related... "I found a flaw in foobar.php - can I access the filesystem through this?" "My logs show somebody sending weird data to foobar.php - what kind of attack is this?"