|
php.net | support | documentation | report a bug | advanced search | search howto | statistics | random bug | login |
PatchesPull RequestsHistoryAllCommentsChangesGit/SVN commits
[2003-06-23 21:55 UTC] sniper@php.net
|
|||||||||||||||||||||||||||
Copyright © 2001-2025 The PHP GroupAll rights reserved. |
Last updated: Sun Dec 07 18:00:01 2025 UTC |
Description: ------------ I found bug? if i use SAFE MODE and function fopen I may show other document diferent user, make rwxrw-rw attribute on public_html home directrory User1 public_html rwxrw-rw- cack.php $data="";M $fp=fopen("../../User2/public_html/index.php","r");M while(!feof($fp)){M $data.=fread($fp,1024); }M fclose($fp);M highlight_string($data);M User2 public_html rwxr-xr-x index.php Reproduce code: --------------- <? $data="";M $fp=fopen("../../User2/public_html/index.php","r");M while(!feof($fp)){M $data.=fread($fp,1024); }M fclose($fp);M highlight_string($data);M ?>