Bug #902: doc_root ignored on Win98 and PWS -- **security hole**
| From: | steveth at pacbell dot net | Date: | Fri, 06 Nov 1998 11:02:41 +0000 |
| Subject: | Bug #902: doc_root ignored on Win98 and PWS -- **security hole** | ||
| Groups: | php.dev | ||
| Request: | Send a blank email to php-dev+get-2242@lists.php.net to get a copy of this message | ||
From: steveth@pacbell.net
Operating system: Win98
PHP version: 3.0.5
PHP Bug Type: Other
Bug description: doc_root ignored on Win98 and PWS -- **security hole**
In other words, http://www.yourserver.com/cgi-bin/php.exe?/autoexec.bat
works. :-(
I think I traced the problem in the source code to the server not setting
the PATH_INFO environment variable. Perhaps this is a bug in PWS? Regardless,
this should have nothing to do with using/not using doc_root.
And yes, safe_mode=1 ...
--
PHP Development Mailing List http://www.php.net/
To unsubscribe send an empty message to php-dev-unsubscribe@lists.php.net
For help: php-dev-help@lists.php.net