Bug #76089 [Opn->Nab]: I can show and discover the server side script

Edit report at https://bugs.php.net/bug.php?id=76089&edit=1 ID: 76089 Updated by: cmb@php.net Reported by: gergelymolnarpro at gmail dot com Summary: I can show and discover the server side script -Status: Open +Status: Not a bug Type: Bug Package: Website problem PHP Version: Irrelevant -Assigned To: +Assigned To: cmb Block user comment: N Private report: N New Comment: The code is publicly available anyway[1], so there is no bug. [1] <https://github.com/php/web-php/blob/master/index.php> <https://github.com/php/web-php/blob/master/include/prepend.inc> Previous Comments: ------------------------------------------------------------------------ [2018-03-13 12:24:43] gergelymolnarpro at gmail dot com If it is closed and fixed, can I report that at hackerone.com? ------------------------------------------------------------------------ [2018-03-13 12:22:55] gergelymolnarpro at gmail dot com Description: ------------ I can show and discover the server side script code with a simple http request at http://php.net Example: http://php.net/cached.php?f=/index.php Example2: http://php.net/cached.php?f=/include/prepend.inc ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=76089&edit=1