Re: yikes... possibly a significant secuirty flaw on your server
| From: | Rasmus Lerdorf | Date: | Tue, 19 Jun 2001 21:04:18 +0000 |
| Subject: | Re: yikes... possibly a significant secuirty flaw on your server | ||
| References: | 1 | Groups: | php.mirrors |
| Request: | Send a blank email to php-mirrors+get-5079@lists.php.net to get a copy of this message | ||
We know, and yes it is intentional.
On Tue, 19 Jun 2001, Jim Huber wrote:
> Hey there,
>
> I was going back to your site for good PHP info, and I started to type
> in your URL, but Netscape's autocomplete feature added the rest:
> "www.php.net:8000/" and I got the listing of all the files in the main
> directory. Curious, I looked on and when I clicked on the index.php link
> (and others, for that matter), it displayed the source code, PHP and
> all! I don't know why my browser added that info, but it did. Maybe this
> is intentional on your part, but nevertheless I thought you should know,
> in case it's a potential security problem.
>
> Jim
>