blocking the dompdf hack

instead of deleting the system/helper/domphp subdirectory to block the hack can i simply rename that subdirectory so i can keep the files in that directory without the program finding them?

john in chicago

That's security through obscurity and it's not usually looked on as a good solution.

1.4.7 doesn't even come with the main bad dompdf.php file anymore. I left the other classes in for the pdf invoice mod that fido made as it was alleged that they were not dangerous. But I am not taking any chances and going to be looking at a completely different solution in 1.5.x. Something that doesn't allow passing remote urls as a $_GET value