Bug #76089 [Com]: I can show and discover the server side script

Edit report at https://bugs.php.net/bug.php?id=76089&edit=1 ID: 76089 Comment by: gergelymolnarpro at gmail dot com Reported by: gergelymolnarpro at gmail dot com Summary: I can show and discover the server side script Status: Not a bug Type: Bug Package: Website problem PHP Version: Irrelevant Assigned To: cmb Block user comment: N Private report: N New Comment: Sorry for report that. I thought I found a nice bug... Previous Comments: ------------------------------------------------------------------------ [2018-03-13 12:38:58] cmb@php.net The code is publicly available anyway[1], so there is no bug. [1] <https://github.com/php/web-php/blob/master/index.php> <https://github.com/php/web-php/blob/master/include/prepend.inc> ------------------------------------------------------------------------ [2018-03-13 12:24:43] gergelymolnarpro at gmail dot com If it is closed and fixed, can I report that at hackerone.com? ------------------------------------------------------------------------ [2018-03-13 12:22:55] gergelymolnarpro at gmail dot com Description: ------------ I can show and discover the server side script code with a simple http request at http://php.net Example: http://php.net/cached.php?f=/index.php Example2: http://php.net/cached.php?f=/include/prepend.inc ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=76089&edit=1