#19324 [Fbk]: show PHP source on client's browser

ID: 19324 Updated by: derick@php.net Reported By: wiseguy@ms10.url.com.tw Status: Feedback Bug Type: Output Control Operating System: Solaris8 x86 PHP Version: 4.2.3 New Comment: 3 and 4 with the "php_engine = on" directive please (explicit). Derick Previous Comments: ------------------------------------------------------------------------ [2002-09-30 05:50:54] alberty@neptunelabs.de Hi , I have a small question to this bug, because I have the same problem. >1. stop apache >2. start apache in single process mode like: > /path/to/apache/httpd -X >3. Request a page from a vhost/directory where PHP is enabled >4. Do that again :) >5. Request a page from a vhost/directory where PHP is disabled >6. Request a page from a vhost/directory where PHP is enabled (but not >explicit with php_engine = on, just the 'default') >7. Request a page from a vhost/directory where PHP is enabled (implicit >wirth php_engine = on) >Please tell us when you see the source and when not. Test 3 and 4 with explicit php_engine directive or not (the same as 6)? However, with php_engine=on in a <virtualhost><location> and also a concurrently php_engine off directive in another <virtualhost>, Apache results always the source code on my virtualhost with php_engine=on. Regards, -- Steve ------------------------------------------------------------------------ [2002-09-30 03:27:58] gild@mail2000.com.tw Will it fixed at next version? ------------------------------------------------------------------------ [2002-09-30 00:27:36] derick@php.net Did you do the tests I asked you to do? Derick ------------------------------------------------------------------------ [2002-09-29 20:27:05] wiseguy@ms10.url.com.tw No wonder the situation never arises in Apache2 . I haven't used "php_engine=off" in httpd.conf (Apache2 will report config error ! It doesn't know the instruct .) So, I just use "AddType text/html .php" to replace "php_engine=off". It's work ! No showing source arise, and some directory can disable PHP. Thanks your help. ------------------------------------------------------------------------ [2002-09-28 12:36:59] derick@php.net Okay, looks like an old bug resurfaced. Can you do the following test, and stick to it very precise: 1. stop apache 2. start apache in single process mode like: /path/to/apache/httpd -X 3. Request a page from a vhost/directory where PHP is enabled 4. Do that again :) 5. Request a page from a vhost/directory where PHP is disabled 6. Request a page from a vhost/directory where PHP is enabled (but not explicit with php_engine = on, just the 'default') 7. Request a page from a vhost/directory where PHP is enabled (implicit wirth php_engine = on) Please tell us when you see the source and when not. regards, Derick ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/19324 -- Edit this bug report at http://bugs.php.net/?id=19324&edit=1