Re: serious misconfiguration of php.net
| From: | Zeev Suraski | Date: | Thu, 21 Jun 2001 05:51:35 +0000 |
| Subject: | Re: serious misconfiguration of php.net | ||
| References: | 1 2 | Groups: | php.mirrors |
| Request: | Send a blank email to php-mirrors+get-5103@lists.php.net to get a copy of this message | ||
As a matter of fact, you probably can. I don't think it's a very good thing, even though it's not a disaster.
Zeev
At 00:34 21/6/2001, Cynic wrote:
Ok then. I just assumed that one could get some stuff otherwise excluded from the view source facility - passwords etc. Sorry to bother you. At 23:21 6/20/2001, Rasmus Lerdorf wrote the following: ---------------------------------------------------------------- Zeev Suraski <zeev@zend.com> CTO & co-founder, Zend Technologies Ltd. http://www.zend.com/We know. The same source can be had via port 80 by using the view source facility. The only reason we would turn this off is the flood of silly messages we get from people telling us about it. -Rasmus ------end of quote------ cynic@mail.cz ------------- And the eyes of them both were opened and they saw that their files were world readable and writable, so they chmoded 600 their files.try http://www.php.net:8000/bugs.php (or any other page). You'll get the source.- Book of Installation chapt 3 sec 7