RE: [PHP] Nasty DoS in PHP
| From: | Jason Murray | Date: | Thu, 18 Apr 2002 00:04:39 +0000 |
| Subject: | RE: [PHP] Nasty DoS in PHP | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-93447@lists.php.net to get a copy of this message | ||
> It does not stop after its execution time.
Is your PHP actually configured to stop running after 30 seconds,
though? Its the default, but you may have overridden it.
> We have let this run for 10+ minutes to see if it would crash the
> server, and it did.
Is it possible you're called set_time_limit() to increase the
script's timeout and thus allow it to run?
> It does not affect the person that loads the code in the browser,
> just affects the server running the code.
Well ... yeah. This is not surprising :p :)
Either way, the fact still remains it's an infinite loop and you
just shouldn't write it. :)
J