I can’t decide which should be on my shit list: PHPShell or the staff member who installed it in his account with public access.
I suppose you should blame the users, not the technology, right? Kind of a cool utility if you have no regard for security. Unfortunately, someone was using it to launch a DOS attack on a gaming server.