Originally Posted by Ramses
Checked an old 2.4.2 folder and there isn't indeed a profile_start.php file. Than there shouldn't be a risk for you?
Thanks. That's what I am trying to figure out. Either the risk isn't present in 2.4.2, or the code is lurking somewhere else.