ID: 28556
Updated by: sniper@php.net
Reported By: floeff at arcor dot de
-Status: Open
+Status: Feedback
Bug Type: CGI related
Operating System: Linux 2.4
PHP Version: 4.3.6
New Comment:
Please try using this CVS snapshot:
http://snaps.php.net/php4-STABLE-latest.tar.gz
For Windows:
http://snaps.php.net/win32/php4-win32-STABLE-latest.zip
And please try without using this binfmt_misc module to rule out THAT
possible cause of this bug.
Previous Comments:
------------------------------------------------------------------------
[2005-02-06 14:27:36] floeff at arcor dot de
Okay, here we go:
./configure --enable-safe-mode --with-mysql --enable-discard-path
--with-exec-dir --enable-memory-limit --with-mm && make && make
install
cp php.ini-dist /usr/local/lib/php.ini
echo ':PHP:E::php::/usr/local/bin/php:' >
/proc/sys/fs/binfmt_misc/register
echo ':PHP3:E::php3::/usr/local/bin/php:' >
/proc/sys/fs/binfmt_misc/register
echo ':PHP4:E::php4::/usr/local/bin/php:' >
/proc/sys/fs/binfmt_misc/register
Changes in php.ini:
expose_php = Off
disable_functions = phpinfo
allow_url_fopen = Off
In httpd.conf of Apache2:
AddHandler cgi-script .cgi .pl .php .php3 .php4
------------------------------------------------------------------------
[2005-02-06 06:57:15] sniper@php.net
Come up with configuration that isn't "security threat" to you and put
it here..
------------------------------------------------------------------------
[2005-02-05 19:07:17] floeff at arcor dot de
I don't post my (maybe security-related) configuration to the public,
sorry. Any e-mail address I could mail it to?
------------------------------------------------------------------------
[2005-02-05 03:40:03] sniper@php.net
DO NOT email anything to me!! Put any details needed to reproduce this
bug here, via this url:
http://bugs.php.net/bug.php?id=28556&edit=2
------------------------------------------------------------------------
[2005-02-03 21:05:48] floeff at arcor dot de
Unfortunately, I have no test system to try.
If you want, I can mail you my documentation privately (via PM), so you
can check it out.
------------------------------------------------------------------------
The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
http://bugs.php.net/28556--
Edit this bug report at http://bugs.php.net/?id=28556&edit=1