#27284 [Opn->Bgs]: User Password in PHPInfo
| From: | helly@php.net | Date: | Tue, 17 Feb 2004 07:37:21 +0000 |
| Subject: | #27284 [Opn->Bgs]: User Password in PHPInfo | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-55055@lists.php.net to get a copy of this message | ||
ID: 27284
Updated by: helly@php.net
Reported By: adam at comsmart dot org
-Status: Open
+Status: Bogus
Bug Type: PHP options/info functions
Operating System: Linux
PHP Version: Irrelevant
New Comment:
Thank you for taking the time to write to us, but this is not
a bug. Please double-check the documentation available at
http://www.php.net/manual/ and the instructions on how to
report
a bug at http://bugs.php.net/how-to-report.php
I assume you mean environment information which you can skip in the
output (RTFM). Otherwise the function is never meant to be shown to
every user.
Previous Comments:
------------------------------------------------------------------------
[2004-02-16 21:50:49] adam at comsmart dot org
Description:
------------
When you call the phpinfo function, it posts your password on the
resulting page. Therefore, you can not include a call to phpinfo on any
public page, because people could get into your system. I think that
the default call to phpinfo should not output the username/password of
the owner of the file.
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=27284&edit=1