Ok .. Let's say that some popular site was hacked .. And at the first page the hacker put a virused page(ie exploit) that write automatic a bad script to script.ini .. Then what ..
I just whant to say .. The script.ini don't must be loaded by default ..
