Bug #12280: $file=fopen("http://".$HTTP_SERVER_VARS["SERVER_NAME"].$PHP_SELF, "r");
| From: | forester at vzljot dot ru | Date: | Fri, 20 Jul 2001 12:36:45 +0000 |
| Subject: | Bug #12280: $file=fopen("http://".$HTTP_SERVER_VARS["SERVER_NAME"].$PHP_SELF, "r"); | ||
| Groups: | php.dev | ||
| Request: | Send a blank email to php-dev+get-60386@lists.php.net to get a copy of this message | ||
From: forester@vzljot.ru
Operating system: linux 2.2.18
PHP version: 4.0.6
PHP Bug Type: Scripting Engine problem
Bug description: $file=fopen("http://".$HTTP_SERVER_VARS["SERVER_NAME"].$PHP_SELF,
"r");
$file=fopen("http://".$HTTP_SERVER_VARS["SERVER_NAME"].$PHP_SELF,
"r");
DoS in Apache 1.3.20+PHP 4.0.6.
--
Edit bug report at: http://bugs.php.net/?id=12280&edit=1