RE: [PHP] Nasty DoS in PHP
| From: | Jason Soza | Date: | Thu, 18 Apr 2002 04:27:58 +0000 |
| Subject: | RE: [PHP] Nasty DoS in PHP | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-93477@lists.php.net to get a copy of this message | ||
Interesting, check out my apache error log:
[Wed Apr 17 18:35:53 2002] [error] PHP Fatal error: Maximum execution time
of 30 seconds exceeded in d:\html\loop.asp on line 7
So PHP recognized the max execution time of 30 seconds being exceeded, but
neither it nor apache shut down the script.
Jason
-----Original Message-----
From: CC Zona [mailto:email@cczona.com]
Sent: Wednesday, April 17, 2002 7:04 PM
To: php-general@lists.php.net
Subject: Re: [PHP] Nasty DoS in PHP
Do you have a PHP binary compiled too? If Apache can be taken out of the
equation and the script still exceed memory/time limits, that would sure
appear to be a PHP bug. (FWIW, I can't find an existing bug report about
this behavior at bugs.php.net. Perhaps you and the OP could run backtraces
and open a new bug report?)
In article <a6edca3ca0.a3ca0a6edc@snowy.gci.net>,
solja@gci.net (Jason Soza) wrote:
> It shows the memory and CPU time being used by apache. I have PHP
> installed as a module, that may be why. (?)
>
> Jason Soza
>
> ----- Original Message -----
> From: Martin Towell <martin.towell@world.net>
> Date: Wednesday, April 17, 2002 6:37 pm
> Subject: RE: [PHP] Nasty DoS in PHP
>
> > Is that memory usage used by PHP or apache?????
> >
> > -----Original Message-----
> > From: Jason Soza [mailto:solja@gci.net]
> > Sent: Thursday, April 18, 2002 12:35 PM
> > To: CC Zona
> > Cc: php-general@lists.php.net
> > Subject: Re: [PHP] Nasty DoS in PHP
> >
> >
> > For what it's worth, I just ran this script on my server, and despite
> > the 30 second time limit and 8mb memory limit in php.ini, the script
> > ran longer than 30 secs, CPU usage went between 60% and 100% and my
> > memory usage reached 352000 before I stopped it.
--
CC