#26250 [NEW]: may view source of all files

From: tspiteri at ieee dot org Operating system: PHP version: Irrelevant PHP Bug Type: Website problem Bug description: may view source of all files Description: ------------ If I try to view the source of e.g. /backend/index.php using: http://www.php.net/source.php?url=/backend/index.php I get an error message: Invalid file or folder specified But I can view it using: http://www.php.net/source.php?url=/manual/../backend/index.php -- Edit bug report at http://bugs.php.net/?id=26250&edit=1 -- Try a CVS snapshot (php4): http://bugs.php.net/fix.php?id=26250&r=trysnapshot4 Try a CVS snapshot (php5): http://bugs.php.net/fix.php?id=26250&r=trysnapshot5 Fixed in CVS: http://bugs.php.net/fix.php?id=26250&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=26250&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=26250&r=needtrace Try newer version: http://bugs.php.net/fix.php?id=26250&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=26250&r=support Expected behavior: http://bugs.php.net/fix.php?id=26250&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=26250&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=26250&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=26250&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=26250&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=26250&r=dst IIS Stability: http://bugs.php.net/fix.php?id=26250&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=26250&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=26250&r=float