php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #65662 root files cpanel
Submitted: 2013-09-12 15:27 UTC Modified: 2013-10-15 11:54 UTC
Votes:5
Avg. Score:2.6 ± 0.8
Reproduced:0 of 0 (0.0%)
From: mbiama at angosso dot com Assigned:
Status: No Feedback Package: Apache2 related
PHP Version: 5.5.3 OS: Ubuntu/linux/Apache/php
Private report: No CVE-ID: None
View Add Comment Developer Edit
Welcome! If you don't have a Git account, you can't do anything here.
You can add a comment by following this link or if you reported this bug, you can edit this bug over here.
(description)
Block user comment
Status: Assign to:
Package:
Bug Type:
Summary:
From: mbiama at angosso dot com
New email:
PHP Version: OS:

 

 [2013-09-12 15:27 UTC] mbiama at angosso dot com
Description:
------------
<?php
include 'http://www.exemple.com/file.php/.?root=1&bar=2';
$root = 1;
$bar = 2;
$(function() {
$root = include 'return.php';

echo $root; // prints 'PHP'

$bar = include 'noreturn.php';

echo $bar; // prints 1
$string = get_include_contents('somefile.php');
?

Expected result:
----------------
<?php
include 'http://www.nav.com/file.php/./?root=1&bar=2';
$root = 1;
$bar = 2;
$(function() {

$("#wb_element_instance599").children("ul").children().each(function() {
                                                if
($(this).children("ul").size() == 0) return;
                                                $(this).hover(function() {

$(this).children("ul").css({display: "block"});
                                                }, function() {

$(this).children("ul").css({display: "none"});
                                                });
                                        });
                                });
include 'file.txt';  // id="wb_element_instance601" class="wb_element";
include 'file.php';  // ul class="hmenu";
<?php include dirname(__FILES__).'/uk.zyro/<li class='active'><a
href='HOME/'
target='_self' title='HOME'>HOME</a></li>'; ?>
<?php include dirname(__FILES__).'/uk.zyro/<li class='active'><a
href='ROOMS/'
target='_self' title='ROOMS'>ROOMS</a></li>';
<?php include dirname(__FILES__).'/uk.zyro/<li class='active'><a
href='RESERVATIONS/' target='_self'
title='RESERVATIONS'>RESERVATIONS</a></li>';
?>
<?php include dirname(__FILES__).'/uk.zyro/<li class='active'><a
href='CONTACTS/' target='_self' title='CONTACTS'>CONTACTS</a></li>'; ?>
<?php include dirname(__FILES__).'/uk.zyro/<li class='active'><a
href='SITEMAP/'
target='_self' title='SITEMAP'>SITEMAP</a></li>'; ?>
<?php include dirname(__FILES__).'/uk.zyro/<li class='active'><a
href='AFFILIATE/' target='_self' title='AFFILIATE'>AFFILIATE</a></li>'; ?>
<?php include dirname(__FILES__).'/uk.zyro/<li class='active'><a
href='MEDIAS/'
target='_self' title='MEDIAS'>MEDIAS</a></li>'; ?>
if ((include 'vars.php') == 'OK') {
    echo 'OK';
}
$root = include 'return.php';

echo $root; // prints 'PHP'

$bar = include 'noreturn.php';

echo $bar; // prints 1
$string = get_include_contents('somefile.php');

function get_include_contents($filename) {
    if (is_file($filename)) {
        ob_start();
        include $filename;
        return ob_get_clean();
    }
    return false;
}
?>


Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2013-09-12 17:16 UTC] requinix@php.net
-Status: Open +Status: Feedback
 [2013-09-12 17:16 UTC] requinix@php.net
Not enough information was provided for us to be able
to handle this bug. Please re-read the instructions at
http://bugs.php.net/how-to-report.php

If you can provide more information, feel free to add it
to this bug and change the status back to "Open".

Thank you for your interest in PHP.


You've given no description of what the supposed bug is and the code you've 
provided is indecipherable and invalid.
 [2013-10-15 11:54 UTC] php-bugs at lists dot php dot net
No feedback was provided. The bug is being suspended because
we assume that you are no longer experiencing the problem.
If this is not the case and you are able to provide the
information that was requested earlier, please do so and
change the status of the bug back to "Re-Opened". Thank you.
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Wed Jun 05 22:01:30 2024 UTC