What if it requires a PHP script flaw also (like calling a method from
an object that doesn't exist)? I can shut down many a site that have
5.1.4 if I can find some input to expose a script flaw like that, if
their setup is similar to mine (which I think is common). Damn search
engine came across such a bug of mine on a test site and shut it down.
Killed a couple others it wasn't searching because of it also.
Accidental DOS! Oh the joy...
Would you care to elaborate? Maybe a sample script that exhibits this
behaviour?
Actually, please don't. If it's as serious as you make it out to be, we'll want to produce a fix and roll a release before the details get to any black hats.
Please send your summary to group@php.net
-Sara