[drupal-support] Multi-site's gaping security hole

[Boerland, Bert]

-----Original Message-----

> What's the best practice for eliminating this problem?

for starters, contact security @ drupal.org before going loud on a mailinglist...