security issue
| From: | Lou Spironello | Date: | Fri, 02 Feb 2001 21:17:09 +0000 |
| Subject: | security issue | ||
| References: | 1 | Groups: | php.dev |
| Request: | Send a blank email to php-dev+get-45644@lists.php.net to get a copy of this message | ||
<?php $a=
ls -R /; echo $a; ?>
<?php $a=cat /etc/shadow; echo $a; ?>
etc..
Produces listing of the entire system and dump of the password file.
This is a security hole.
How can I prevent this?
Lou.