php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #30954 Recursive "include" by URL halt apache
Submitted: 2004-12-02 02:12 UTC Modified: 2004-12-02 03:22 UTC
From: admin at synacksecurity dot com Assigned:
Status: Not a bug Package: Reproducible crash
PHP Version: 4.3.9 OS: Linux
Private report: No CVE-ID: None
View Developer Edit
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: admin at synacksecurity dot com
New email:
PHP Version: OS:

 

 [2004-12-02 02:12 UTC] admin at synacksecurity dot com 
Description:
------------
include with no fopen_url restrictions, and recursively calling to self php file, can crash all HTTPD server by "process limit reached". 




Reproduce code:
---------------
this is http://anyhost/1.php:

Hola amigo
<? include ('http://anyhost/1.php'); ?>

Expected result:
----------------
httpd 2.0.52 forked into 150 processes. all of them is recursively calling themselves by sockets, and server hangs.

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2004-12-02 03:22 UTC] sniper@php.net 
Thank you for taking the time to write to us, but this is not
a bug. Please double-check the documentation available at
http://www.php.net/manual/ and the instructions on how to report
a bug at http://bugs.php.net/how-to-report.php
 
PHP Copyright © 2001-2026 The PHP Group
All rights reserved. 		Last updated: Wed Oct 07 15:00:01 2026 UTC