php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #4032 Major security issue PHP+Apache
Submitted: 2000-04-04 08:15 UTC Modified: 2001-02-10 16:25 UTC
From: liz at xcalibur dot demon dot co dot uk Assigned:
Status: Closed Package: Dynamic loading
PHP Version: 3.0.11 OS: Linux Slackware
Private report: No CVE-ID: None
 [2000-04-04 08:15 UTC] liz at xcalibur dot demon dot co dot uk
**This maybe a bug with apache, but it seems to honour everything else so.. Apache v1.3.12+PHP 4.0/RC1*

Basically it seems if you make a form, and call PHP code as the forms action event.. such as 

<form method=POST action=http://www.xcalibur.co.uk/t/t/index.html> 
Name
<input type=text name=PHP_AUTH_USER size=40>
Password 
<input type=text name=PHP_AUTH_PW size=50>
<input type=submit name=submit value=submit>
</form>

Where the new directory has the password protection on it.... it lets you clean straight in.. wether you entered correct ID or not!

I'll leave the 2 pages up to show you

http://www.xcalibur.co.uk/t/index.html
Enter any id/password (or even not)

if you close your browser and try and access the file it takes you to http://www.xcalibur.co.uk/t/t/index.html you can only get in with an ID of new and pwd of new

Before anyone wonders why in hell I was doing this... The server I managed to wangle as my website doesnt really have compile options, so, Ive had to compiled everything on my server and ftp it over, everything works bar the install of mysql which uses ginstall which of course isnt (yet) on the other server. So, I was trying to see if I could use PHP to effectively replace the nasty dialog boxes, I was a bit concerned when it more than replaced it, it compelely ate it.

Hope this doesnt cause a problem - I couldnt find the place to submit PHP4 problems.. I hope you dont tell me to use PHP3 coz, well, Im only learning PHP and I kinda wanted to start with the v4 product

Liz

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2001-02-10 16:25 UTC] jimw@php.net
this doesn't give enough to go on.
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Thu Apr 25 14:01:31 2024 UTC