Re: Should I report this bug/exploit?
| From: | Peter Brodersen | Date: | Tue, 05 Apr 2005 01:28:00 +0000 |
| Subject: | Re: Should I report this bug/exploit? | ||
| References: | 1 2 3 4 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-15803@lists.php.net to get a copy of this message | ||
On Mon, 4 Apr 2005 09:13:04 +0200 (CEST), in php.internals
derick@php.net (Derick Rethans) wrote:
>> Is that a publically accessable mailing list or does it just go to a
>> few people?
>
>Only a few people.
.. but don't expect any kind of feedback :-)
(yeah, I know - I'm still yackin' about the
print_r(glob("{/home/currentuser/,/etc/}*",GLOB_BRACE)) issue combined
with the glob file name disclosure issue)
--
- Peter Brodersen