Hacker News Reader

Frakenfiles like this are made by PHP coders who have:

Download.php:

if (isset($POST['whatever']) write($file_contents);

print "download page contents here"

When you're done flaming PHP, read the whole Github thread, and especially comment #4. The file was produced by a .NET library.

Even so, it could easily be produced by this kind of error in a PHP script.

Including an ending tag (?>) followed by whitespace could have the same effect.

Yep, it has nothing to do with PHP. It's easy to produce this kind of frankenfile with an incorrect cp command. Or with incorrect stream management using any zip library that emits streams.

Reply on news.ycombinator.com