This hack exploits the PHP basename function in admin directories where htaccess is not used to control logins. The code in admin/includes/application_top.php can be amended to stop this hack - but the safest solution, as mentioned above, is to use htaccess in the admin directory.
Find content
Male
