might expect that they would also appear regularly in web
applications. However, it is likely that researchers do not focus
on format strings because they are rarely exploitable for code
execution in languages other than C. In the case of PHP, many