ID: 28556
User updated by: floeff at arcor dot de
Reported By: floeff at arcor dot de
-Status: Feedback
+Status: Open
Bug Type: CGI related
Operating System: Linux 2.4
PHP Version: 4.3.6
New Comment:
Okay, here we go:
./configure --enable-safe-mode --with-mysql --enable-discard-path
--with-exec-dir --enable-memory-limit --with-mm && make && make
install
cp php.ini-dist /usr/local/lib/php.ini
echo ':PHP:E::php::/usr/local/bin/php:' >
/proc/sys/fs/binfmt_misc/register
echo ':PHP3:E::php3::/usr/local/bin/php:' >
/proc/sys/fs/binfmt_misc/register
echo ':PHP4:E::php4::/usr/local/bin/php:' >
/proc/sys/fs/binfmt_misc/register
Changes in php.ini:
expose_php = Off
disable_functions = phpinfo
allow_url_fopen = Off
In httpd.conf of Apache2:
AddHandler cgi-script .cgi .pl .php .php3 .php4
Previous Comments:
------------------------------------------------------------------------
[2005-02-06 06:57:15] sniper@php.net
Come up with configuration that isn't "security threat" to you and put
it here..
------------------------------------------------------------------------
[2005-02-05 19:07:17] floeff at arcor dot de
I don't post my (maybe security-related) configuration to the public,
sorry. Any e-mail address I could mail it to?
------------------------------------------------------------------------
[2005-02-05 03:40:03] sniper@php.net
DO NOT email anything to me!! Put any details needed to reproduce this
bug here, via this url:
http://bugs.php.net/bug.php?id=28556&edit=2
------------------------------------------------------------------------
[2005-02-03 21:05:48] floeff at arcor dot de
Unfortunately, I have no test system to try.
If you want, I can mail you my documentation privately (via PM), so you
can check it out.
------------------------------------------------------------------------
[2005-02-03 19:25:49] sniper@php.net
And it still happens with latest CVS snapshot?
------------------------------------------------------------------------
The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
http://bugs.php.net/28556--
Edit this bug report at http://bugs.php.net/?id=28556&edit=1