RE: [PHP] Nasty DoS in PHP
| From: | Jason Murray | Date: | Thu, 18 Apr 2002 00:14:11 +0000 |
| Subject: | RE: [PHP] Nasty DoS in PHP | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-93450@lists.php.net to get a copy of this message | ||
> It's a default PHP installation. We aren't calling set_time_limit().
> I know its an infinite loop, the point is that if a user wanted to
> attack a server (happens every day) they would be able to use this
> method to take the server down.
But, if the user has enough access to the server to place files on it,
then they can do much, much worse stuff than running an infinite loop
in PHP. Like I said, if it gets to that point you have bigger problems.
Jason