Symbolic Link - Security Issue?

From: Date: Fri, 05 Oct 2001 14:21:21 +0000
Subject: Symbolic Link - Security Issue?
References: 1 2  Groups: php.general 
Request: Send a blank email to php-general+get-70087@lists.php.net to get a copy of this message
Hi, I have a directory with an index.php script so that the url is something along the lines of http://www.mydomain.com/search/ .. Now following the same logic I wanted to write another script but not bother creating another directory so I wrote my script called test.php and then created a symbolic link to it by pointing 'test' (without the quotes, of course) to test.php and upon going to http://www.mydomain.com/search/test I got my script's source displayed in plain text on the browser .. Now maybe this is something I shouldnt be doing or the way I have the webserver configured but, just thought Id find out, by checking to see if anyone else knows anything about this.. BTW, I am on a Redhat 8 Linux (kernel version 2.4.7-2) server running php version 4.0.6 and I have checked in the conf of Apache to see for the source its set to phps .. Thanks..

« previous php.general (#70087) next »