Bug #12280 Updated: $file=fopen("http://".$HTTP_SERVER_VARS["SERVER_NAME"].$PHP_SELF, "r");
| From: | sniper@php.net | Date: | Tue, 23 Apr 2002 04:37:14 +0000 |
| Subject: | Bug #12280 Updated: $file=fopen("http://".$HTTP_SERVER_VARS["SERVER_NAME"].$PHP_SELF, "r"); | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-5624@lists.php.net to get a copy of this message | ||
ID: 12280
Updated by: sniper@php.net
Reported By: forester@vzljot.ru
-Status: Suspended
+Status: Bogus
Bug Type: Scripting Engine problem
Operating System: linux 2.2.18
PHP Version: 4.0.6
New Comment:
bogus is better..there's one suspended already..
Previous Comments:
------------------------------------------------------------------------
[2001-07-20 11:29:09] cynic@php.net
this is not the only way you can crash PHP - how about recursive
functions? I don't think this can/will/should be fixed. -> suspended.
------------------------------------------------------------------------
[2001-07-20 08:36:45] forester@vzljot.ru
$file=fopen("http://".$HTTP_SERVER_VARS["SERVER_NAME"].$PHP_SELF,
"r");
DoS in Apache 1.3.20+PHP 4.0.6.
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=12280&edit=1