RE: [PHP-DEV] php sometimes doesn't parses...
| From: | Zak Greant | Date: | Fri, 08 Dec 2000 19:58:47 +0000 |
| Subject: | RE: [PHP-DEV] php sometimes doesn't parses... | ||
| References: | 1 | Groups: | php.dev php.qa |
| Request: | Send a blank email to php-dev+get-40593@lists.php.net to get a copy of this message | ||
At 02:50 PM 12/8/00 -0500, Mike Robinson wrote:
Zeev Suraski wrote: Guys, this is a *horrible* bug. I don't remember seeing it before, but then again, who knows - I'm senile sometimes. If PHP randomly sends the source code of its scripts as-is instead of executing them, it's a class-A security issue which is a major show stopper for 4.0.4. Everyone who's experiencing this behavior (even if it's only once in a while, it's once too many) - please come forward. We should find a way to reproduce it and sort it out. Sascha - I think this rates as a show-stopper too until we figure out if it's legitimate, and if it is, solve it... FWIW, 2 years of redhat from 5.2 thru 7.0, and FreeBSD-3.0 thru 3.3[4?] with many significantly sized/complex implementations of php-based sites, I have _never_ seen this happen with a properly configured httpd.conf.Nor (to my knowledge) have I had any problems of this sort running PHP 3.0.5 - 4.0.5 dev on a variety of OSs (BSDi, Redhat, OpenBSD, Mandrake, Win98/NT/2k) and servers (mainly Apache an IIS) -- however, if it is a very infrequent problem, I may just never have seen it. Perhaps it would be worthwhile to set up a torture test that captures page output? Have everyone available run the test as much as they can and then see if it can be reproduced. --zak