#20356 [NEW]: [CRITICAL] PHP delivers sourcecode

From: janus@linux-de.org Operating system: linux 2.4.19 PHP version: 4CVS-2002-11-11 PHP Bug Type: *General Issues Bug description: [CRITICAL] PHP delivers sourcecode It's just like http://bugs.php.net/bug.php?id=14751 Except now i'm confirming that with Apache2 in SSL-mode. It has to be a PHP problem, because a HTTP-Header looks like this: ---------- 0 HTTP/1.1 200 OK Date: Mon, 11 Nov 2002 11:31:32 GMT Server: Apache/2.0.43 (Unix) mod_ssl/2.0.43 OpenSSL/0.9.6g ---------- Yes, THERE IS a "0\n\n" before the real header... and that happens ONLY with PHP, all other CGI-Scripts work fine. PHP is configured like this in htt.conf: ---------- ScriptAlias /php4-cgi-bin-dir "/pool/system/php4/bin" Action application/x-httpd-php /php4-cgi-bin-dir/php AddHandler application/x-httpd-php .php ---------- -- Edit bug report at http://bugs.php.net/?id=20356&edit=1 -- Try a CVS snapshot: http://bugs.php.net/fix.php?id=20356&r=trysnapshot Fixed in CVS: http://bugs.php.net/fix.php?id=20356&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=20356&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=20356&r=needtrace Try newer version: http://bugs.php.net/fix.php?id=20356&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=20356&r=support Expected behavior: http://bugs.php.net/fix.php?id=20356&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=20356&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=20356&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=20356&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=20356&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=20356&r=dst IIS Stability: http://bugs.php.net/fix.php?id=20356&r=isapi