Re: Major Security hole in php
| From: | Jim Winstead | Date: | Sat, 23 Feb 2002 05:22:02 +0000 |
| Subject: | Re: Major Security hole in php | ||
| References: | 1 | Groups: | php.mirrors |
| Request: | Send a blank email to php-mirrors+get-8816@lists.php.net to get a copy of this message | ||
On Sat, Feb 23, 2002 at 04:05:12PM +1100, gnif@goldweb.com.au wrote:
> Hi, my name is Geoffrey and I think I have found a major hole in php
> or the configuration on most servers. If you make a page from the
> following code you will see the problem, just goto the url of the page
> and put ?page=. on the end.
i don't see the security hole in php. if you blindly open files and
directories specified by the user, you've dug your own hole.
jim