Re: PHP files appearing in error_log
| From: | Richard Lynch | Date: | Tue, 21 Aug 2001 23:25:12 +0000 |
| Subject: | Re: PHP files appearing in error_log | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-63814@lists.php.net to get a copy of this message | ||
> The issue is that every once in a while I get a full copy of a page in my
> system error_log. That is, not the error_log for the site the page exists
> on, but the /var/log/httpd/error_log.
Wild Hypothesis:
Some worm/virus/hacker is trying to access:
http://yoursite.com/something/something/../../whatever.php
in the hopes of
getting into something. Apache and PHP are getting confused, and end up
spewing your HTML/PHP file into the log as source. (Which sure beats giving
the hacker anything, eh?)
This questin *HAS* appeared before. Check the archives at
http://php.net/support.php
Not quite sure what key words will dredge up the thread, though...
> If this is in a FAQ somewhere or a common question, I apologize, I am new
to
> this list. I would greatly appreciate a pointer to such a FAQ if it
exists.
Don't think this is an FAQ, but you want http://php.net/FAQ.php
--
WARNING richard@zend.com address is an endangered species -- Use
ceo@l-i-e.com
Wanna help me out? Like Music? Buy a CD: http://l-i-e.com/artists.htm
Volunteer a little time: http://chatmusic.com/volunteer.htm