yikes... possibly a significant secuirty flaw on your server
| From: | Jim Huber | Date: | Tue, 19 Jun 2001 20:26:58 +0000 |
| Subject: | yikes... possibly a significant secuirty flaw on your server | ||
| Groups: | php.mirrors | ||
| Request: | Send a blank email to php-mirrors+get-5078@lists.php.net to get a copy of this message | ||
Hey there,
I was going back to your site for good PHP info, and I started to type
in your URL, but Netscape's autocomplete feature added the rest:
"www.php.net:8000/" and I got the listing of all the files in the main
directory. Curious, I looked on and when I clicked on the index.php link
(and others, for that matter), it displayed the source code, PHP and
all! I don't know why my browser added that info, but it did. Maybe this
is intentional on your part, but nevertheless I thought you should know,
in case it's a potential security problem.
Jim