php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #26180 server randomly sends source code of php page to browser
Submitted: 2003-11-08 12:44 UTC Modified: 2003-11-08 17:05 UTC
From: svec at nostromo dot cz Assigned:
Status: Not a bug Package: Apache2 related
PHP Version: 4.3.4 OS: redhat linux 7.3 w 2.4.9 kernel
Private report: No CVE-ID: None
View Developer Edit
Welcome! If you don't have a Git account, you can't do anything here.
If you reported this bug, you can edit this bug over here.
(description)
Block user comment
Status: Assign to:
Package:
Bug Type:
Summary:
From: svec at nostromo dot cz
New email:
PHP Version: OS:

 

 [2003-11-08 12:44 UTC] svec at nostromo dot cz
Description:
------------
config: php from 4.3.1 to 4.3.4 , apache2, latest versions (now 2.0.48), latest openssl

apache & php configured with ssl, we have either our (thawte) ssl server certificate, either our custom certificate, built from openssl package.

Problem:
Server randomly sends source code of php page to browser,
(from 10 pageviews, 3 pages are sent as source code, 7 as good -> php processed page)

- it happens only on some php pages, don't rely on amount scripting in page.

- happens on pages, which includes other php scripts (php libs etc)

but: it started to happen from php version 3.x.x , last version of php, which functioned well, was 4.2.3 , without any flaw or problem

happens on all browsers, for example opera, ie, netscape

on version 4.3.1, php crashed with segfault (it was on httpd error log), now (version 4.3.2 -> 4.3.4) it only sends source of page to browser, no crash and crash info written to httpd error log.

i thought it was due to deflate mod i am using on apache2, but it happened too when deflate filter was switched off (commented out in httpd.conf)


Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2003-11-08 12:51 UTC] iliaa@php.net
Do you have a virtual host entry with engine_off ini value being set to true?
 [2003-11-08 15:35 UTC] svec at nostromo dot cz
yes, one of ( about 30 ) virtual hosts on our server have this directive in Directory section, this is copy of this section:

<Directory /var/www/u/www.graphicdesigner.cz>
    Options FollowSymLinks
    AllowOverride None
    php_flag engine off
</Directory>
 [2003-11-08 17:05 UTC] iliaa@php.net
Please do not submit the same bug more than once. An existing
bug report already describes this very problem. Even if you feel
that your issue is somewhat different, the resolution is likely
to be the same. 

Thank you for your interest in PHP.

In that case this is a duplicate of bug #25753
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Sat Sep 28 21:01:26 2024 UTC