Re: PHP.net - 2 Issues on server
| From: | Daniel Brown | Date: | Sat, 30 Jun 2012 18:00:59 +0000 |
| Subject: | Re: PHP.net - 2 Issues on server | ||
| References: | 1 | Groups: | php.webmaster |
| Request: | Send a blank email to php-webmaster+get-13811@lists.php.net to get a copy of this message | ||
On Tue, Feb 14, 2012 at 11:24 AM, Yousha Aleayoub <Yousha.A@mail.com> wrote:
> Hi,
>
> I found 2 issues:
>
> 1- The TRACE method is available on the server with a Bug!:
That has now been disabled.
> 2- SERVER-STATUS is enabled on server(or public premission):
> http://php.net/server-status
Because of the open nature of our codebase and system
configurations, I don't view this as a critical vulnerability in need
of correction. As such, for now, I'll leave it enabled.
Thanks for your report, Yousha. In the future, please send your
findings to systems@php.net.
Thanks again.
--
</Daniel P. Brown>
Network Infrastructure Manager
http://www.php.net/