I am sure this has probably been posted however just incase it has not. http://isc.sans.org/diary.php?date=2004-12-26 There was a PHP based worm unleashed on 12.25.04 Just letting you know.
ya i read about it... interesting... but that is what you get if you dont check user submitted data.... ;-)