Re: serious misconfiguration of php.net
| From: | Cynic | Date: | Wed, 20 Jun 2001 21:34:39 +0000 |
| Subject: | Re: serious misconfiguration of php.net | ||
| References: | 1 | Groups: | php.mirrors |
| Request: | Send a blank email to php-mirrors+get-5102@lists.php.net to get a copy of this message | ||
Ok then.
I just assumed that one could get some stuff otherwise
excluded from the view source facility - passwords etc.
Sorry to bother you.
At 23:21 6/20/2001, Rasmus Lerdorf wrote the following:
--------------------------------------------------------------
>> try http://www.php.net:8000/bugs.php (or any other page).
>>
>> You'll get the source.
>
>We know. The same source can be had via port 80 by using the view source
>facility.
>
>The only reason we would turn this off is the flood of silly messages we
>get from people telling us about it.
>
>-Rasmus
------end of quote------
cynic@mail.cz
-------------
And the eyes of them both were opened and they saw that their files
were world readable and writable, so they chmoded 600 their files.
- Book of Installation chapt 3 sec 7