Bug #12280 Updated: $file=fopen("http://".$HTTP_SERVER_VARS["SERVER_NAME"].$PHP_SELF, "r");

From: Date: Fri, 20 Jul 2001 15:29:10 +0000
Subject: Bug #12280 Updated: $file=fopen("http://".$HTTP_SERVER_VARS["SERVER_NAME"].$PHP_SELF, "r");
References: 1  Groups: php.dev 
Request: Send a blank email to php-dev+get-60412@lists.php.net to get a copy of this message 
ID: 12280
Updated by: cynic
Reported By: forester@vzljot.ru
Old Status: Open
Status: Suspended
Bug Type: Scripting Engine problem
Operating System: linux 2.2.18
PHP Version: 4.0.6
New Comment:

this is not the only way you can crash PHP - how about recursive functions? I don't think this
can/will/should be fixed. -> suspended.

Previous Comments:
------------------------------------------------------------------------

[2001-07-20 08:36:45] forester@vzljot.ru

$file=fopen("http://".$HTTP_SERVER_VARS["SERVER_NAME"].$PHP_SELF,
"r");

DoS in Apache 1.3.20+PHP 4.0.6.

------------------------------------------------------------------------



Edit this bug report at http://bugs.php.net/?id=12280&edit=1

Thread (2 messages)

« previous php.dev (#60412) next »