| goba@php.net 2006-03-24, 7:01 pm |
| ID: 36845
Updated by: goba@php.net
Reported By: peter at netvlies dot nl
-Status: Open
+Status: Bogus
Bug Type: Website problem
PHP Version: Irrelevant
New Comment:
Hm, then http://www.php.net/source.php?url=/include/mirrors.inc might
be an even bigger security problem. Wuhu! Feel free to look around our
source code. We have numerous views on what is behind php.net,
source.php is one of them.
Previous Comments:
------------------------------------------------------------------------
[2006-03-24 14:24:55] peter at netvlies dot nl
Description:
------------
Yesterday, php.net didn't work due to an error message produced by
mirror.inc, this has been fixed, but i noticed that i am able to access
mirror.inc (and probably every other file in that directory), which is a
security bug..
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=36845&edit=1
|