#19324 [Ctl]: show PHP source on client's browser

From: Date: Thu, 26 Sep 2002 03:48:14 +0000
Subject: #19324 [Ctl]: show PHP source on client's browser
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-20380@lists.php.net to get a copy of this message 
 ID:               19324
 Updated by:       sniper@php.net
 Reported By:      wiseguy@ms10.url.com.tw
 Status:           Critical
 Bug Type:         Output Control
 Operating System: Solaris8 x86
 PHP Version:      4.2.3
 New Comment:

With which apache version it doesn't work?



Previous Comments:
------------------------------------------------------------------------

[2002-09-25 21:29:57] wiseguy@ms10.url.com.tw

I compiled php without any CFLAGS, showing source still 
arisen .
My gcc version is 3.2 .

PS: but the situation doesn't arise on "APACHE 2.x + PHP" .

------------------------------------------------------------------------

[2002-09-25 09:44:54] sniper@php.net

Could you try compiling PHP without using ANY predefined CFLAGS?  ie.
only run the configure with your options.


------------------------------------------------------------------------

[2002-09-25 03:56:02] wiseguy@ms10.url.com.tw

When I use :
header('Location: xxx.php?a=123&b=456');

(1) use header() function
(2) the URL append GET string

then php file show the source on client's browser.
But after reload, the PHP just normal run.

------------------------------------------------------------------------

[2002-09-09 20:54:05] wiseguy@ms10.url.com.tw

After I upgrade PHP from v4.2.2 to v4.2.3, my system 
actually show PHP source on client's browser ! It never 
arise in v4.2.2 , and I haven't change my configure and
php.ini . The case is not always arising. It should arise 
when I click the links to switch the PHP pages fast.

===========================================================
CC=gcc \
CFLAGS="-O6 -mcpu=pentiumpro" \
./configure \
--enable-track-vars \
--enable-inline-optimization \
--enable-mbstring \
--enable-ctype \
--disable-wddx \
--disable-debug \
--disable-experimental-zts \
--with-xml \
--with-mcrypt=/usr/local \
--with-dom=/usr/local \
--with-zlib-dir=/usr/local \
--with-mysql=/usr/local/mysql \
--with-iconv=/usr/local \
--with-apxs=/usr/local/apache/bin/apxs \
--prefix=/usr/local


------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=19324&edit=1

Thread (28 messages)

« previous php.bugs (#20380) next »