Re: About CVE-2012-0831 (magic_quotes_gpc remote disable vulnerability?)
| From: | J David | Date: | Thu, 16 Feb 2012 07:41:47 +0000 |
| Subject: | Re: About CVE-2012-0831 (magic_quotes_gpc remote disable vulnerability?) | ||
| References: | 1 2 3 4 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-57887@lists.php.net to get a copy of this message | ||
On Thu, Feb 16, 2012 at 2:33 AM, Rasmus Lerdorf <rasmus@lerdorf.com> wrote:
> On 02/15/2012 11:24 PM, J David wrote:
>> The specific circumstance was that magic_quotes_gpc was being set to
>> off in Apache via php_flag, rather than in the .ini file. phpinfo()
>> reported magic_quotes_gpc as Off/On, but magic quotes behavior started
>> happening anyway.
>
> Was this
> with Apache1 or 2 you saw this?
Apache 2.2 (--with-apxs2)
Hope that helps.