note 73618 added to function.phpinfo
| From: | andrew at weekendhosting dot com | Date: | Sun, 04 Mar 2007 09:57:14 +0000 |
| Subject: | note 73618 added to function.phpinfo | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-124063@lists.php.net to get a copy of this message | ||
As revealed by the Month of PHP Bugs, phpinfo() has a XSS vunerability. I know a lot of new
developers won't know about the Month of Bugs, so I think it's important to let people
know here.
Do not use phpinfo() on a live site, it's extremely easy to google for, and, it's a very
easy hack to use.
Andrew
----
Server IP: 194.145.210.3
Probable Submitter: 84.92.215.84
----
Manual Page -- http://www.php.net/manual/en/function.phpinfo.php
Edit -- https://master.php.net/note/edit/73618
Del: integrated -- https://master.php.net/note/delete/73618/integrated
Del: useless -- https://master.php.net/note/delete/73618/useless
Del: bad code -- https://master.php.net/note/delete/73618/bad+code
Del: spam -- https://master.php.net/note/delete/73618/spam
Del: non-english -- https://master.php.net/note/delete/73618/non-english
Del: in docs -- https://master.php.net/note/delete/73618/in+docs
Del: other reasons-- https://master.php.net/note/delete/73618
Reject -- https://master.php.net/note/reject/73618
Search -- https://master.php.net/manage/user-notes.php