#19324 [Com]: show PHP source on client's browser

From: Date: Mon, 30 Sep 2002 11:18:43 +0000
Subject: #19324 [Com]: show PHP source on client's browser
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-20763@lists.php.net to get a copy of this message
 ID:               19324
 Comment by:       alberty@neptunelabs.de
 Reported By:      wiseguy@ms10.url.com.tw
 Status:           Feedback
 Bug Type:         Output Control
 Operating System: Solaris8 x86
 PHP Version:      4.2.3
 New Comment:

3. showing source code
4. showing source code
5. showing source code
6. no source code 
7. showing source code


Previous Comments:
------------------------------------------------------------------------

[2002-09-30 05:53:45] derick@php.net

3 and 4 with the "php_engine = on" directive please (explicit).

Derick

------------------------------------------------------------------------

[2002-09-30 05:50:54] alberty@neptunelabs.de

Hi ,

I have a small question to this bug, because I have the same problem.

>1. stop apache
>2. start apache in single process mode like:
>   /path/to/apache/httpd -X
>3. Request a page from a vhost/directory where PHP is enabled
>4. Do that again :)
>5. Request a page from a vhost/directory where PHP is disabled
>6. Request a page from a vhost/directory where PHP is enabled (but
not
>explicit with php_engine = on, just the 'default')
>7. Request a page from a vhost/directory where PHP is enabled
(implicit
>wirth php_engine = on)
>Please tell us when you see the source and when not.

Test 3 and 4 with explicit php_engine directive or not (the same as
6)?

However, with php_engine=on in a <virtualhost><location> and also a
concurrently php_engine off directive in another <virtualhost>, Apache
results always the source code on my virtualhost with php_engine=on.

Regards,

-- 
Steve

------------------------------------------------------------------------

[2002-09-30 03:27:58] gild@mail2000.com.tw

Will it fixed at next version?

------------------------------------------------------------------------

[2002-09-30 00:27:36] derick@php.net

Did you do the tests I asked you to do?

Derick

------------------------------------------------------------------------

[2002-09-29 20:27:05] wiseguy@ms10.url.com.tw

No wonder the situation never arises in Apache2 .
I haven't used "php_engine=off" in httpd.conf (Apache2
will report config error ! It doesn't know the instruct .)

So, I just use "AddType text/html .php" to replace
"php_engine=off". It's work ! No showing source arise,
and some directory can disable PHP.

Thanks your help.

------------------------------------------------------------------------

The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
    http://bugs.php.net/19324

-- 
Edit this bug report at http://bugs.php.net/?id=19324&edit=1



Thread (28 messages)

« previous php.bugs (#20763) next »