Over the weekend an error (I won’t go into details of Apache/PHP mods) on a Facebook server rendered the PHP code as a text file instead of processing it. This means that the code was served up to the user.

A blog called Facebook Secrets has made the code for the Facebook homepage available.

Now, does this leak mean hackers have access and your data is not safe? No. But it does give insight to the folder structure which is the first step for a hacker.

One blogger has already received a Cease & Desist forcing him to take down the code. Facebook Secrets has not (or has not let us know).

Regardless seems like a pretty newb move for a site as large as Facebook. An intern definitely got fired for this.

via Compiler

Tags: Facebook, Code