RE: [PHP-DEV] php sometimes doesn't parses...
| From: | Mike Robinson | Date: | Fri, 08 Dec 2000 19:50:29 +0000 |
| Subject: | RE: [PHP-DEV] php sometimes doesn't parses... | ||
| References: | 1 | Groups: | php.dev |
| Request: | Send a blank email to php-dev+get-40589@lists.php.net to get a copy of this message | ||
> Zeev Suraski wrote:
> Guys, this is a *horrible* bug. I don't remember seeing it before, but
> then again, who knows - I'm senile sometimes.
>
> If PHP randomly sends the source code of its scripts as-is instead of
> executing them, it's a class-A security issue which is a major
> show stopper
> for 4.0.4.
>
> Everyone who's experiencing this behavior (even if it's only once in a
> while, it's once too many) - please come forward. We should find
> a way to
> reproduce it and sort it out.
>
> Sascha - I think this rates as a show-stopper too until we figure out if
> it's legitimate, and if it is, solve it...
FWIW, 2 years of redhat from 5.2 thru 7.0, and FreeBSD-3.0 thru 3.3[4?]
with many significantly sized/complex implementations of php-based sites, I
have _never_ seen this happen with a properly configured httpd.conf.
Regards
Mike Robinson