note 13265 deleted from function.include.php by sniper
| From: | sniper@php.net | Date: | Tue, 12 Jun 2001 05:31:02 +0000 |
| Subject: | note 13265 deleted from function.include.php by sniper | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-14436@lists.php.net to get a copy of this message | ||
¾È³çÇϼ¼¿ä? ¿©±â¿¡ Áú¹®Çصµ µÇ´ÂÁö ¸ð¸£°Ú³×¿ä.
Win2k IIS+PHP4.x¿¡¼ ´ÙÀ½°ú °°ÀÌ URL¶Ç´Â »ó´ë°æ·Î include¸¦ Çϸé
Fail open... ¿¡·¯°¡ ³³´Ï´Ù. µÇ´Â °æ¿ì´Â ´Ü ÇÑ°¡Áö Àý´ë°æ·Î
ÀÔ´Ï´Ù.
include ("http://foo.com/_private/ba.inc.php"); (X)
include ("./_private/ba.inc.php"); (X)
include ("._privateba.inc.php"); (X)
include ("E:/home/foo/public_html/_private/ba.inc.php"); (O)
¾îµð°¡ ¹®Á¦ÁÒ? ¾î¶»°Ô Çϴ°ÍÀÌ °¡Àå ÁÁÀº ¹æ¹ýÀΰ¡¿ä?
°¨»çÇÕ´Ï´Ù.