I saw it this morning on my facebook feed the image not the post Im not too interested in who posted it . The last thing they need is their identity being revealed after they just had their family member murdered <| sep |> I use a cms and all you said is done in the cms so that ' s fine . I ' m not really a php dev but since php is server side , it means it ' s never downloaded by guy browsing the site , so how could he access something ? He would only access the html parts of the file . Seriously , I don ' t understand , sorry . Maybe you could show me a sample of php file that I could upload and access myself and see the php ? Or is it only about GET parameters ? But it doesn ' t seem that much of a security threat like getting access to the server