[php-src] Issue #8014: http_response_code(400) in file_exists bug when using variable (in if block)
| From: | ReturnMe | Date: | Mon, 31 Jan 2022 23:23:04 +0000 |
| Subject: | [php-src] Issue #8014: http_response_code(400) in file_exists bug when using variable (in if block) | ||
| Groups: | php.bugs | ||
| Request: | Send a blank email to php-bugs+get-239384@lists.php.net to get a copy of this message | ||
Issue: https://github.com/php/php-src/issues/8014
Comment Author: ReturnMe
> Please also note your code is probably vulnerable to inclusion of unintended scripts by adding
>
../ to the u GET parameter.
Output of var_dump just before file_exist:
array(2) {
["u"]=>
string(5) "index"
["q"]=>
string(0) ""
}
I think I cleared well enough.