php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #65662 root files cpanel
Submitted: 2013-09-12 15:27 UTC Modified: 2013-10-15 11:54 UTC
Votes:5
Avg. Score:2.6 ± 0.8
Reproduced:0 of 0 (0.0%)
From: mbiama at angosso dot com Assigned:
Status: No Feedback Package: Apache2 related
PHP Version: 5.5.3 OS: Ubuntu/linux/Apache/php
Private report: No CVE-ID: None
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: mbiama at angosso dot com
New email:
PHP Version: OS:

 

 [2013-09-12 15:27 UTC] mbiama at angosso dot com
Description:
------------
<?php
include 'http://www.exemple.com/file.php/.?root=1&bar=2';
$root = 1;
$bar = 2;
$(function() {
$root = include 'return.php';

echo $root; // prints 'PHP'

$bar = include 'noreturn.php';

echo $bar; // prints 1
$string = get_include_contents('somefile.php');
?

Expected result:
----------------
<?php
include 'http://www.nav.com/file.php/./?root=1&bar=2';
$root = 1;
$bar = 2;
$(function() {

$("#wb_element_instance599").children("ul").children().each(function() {
                                                if
($(this).children("ul").size() == 0) return;
                                                $(this).hover(function() {

$(this).children("ul").css({display: "block"});
                                                }, function() {

$(this).children("ul").css({display: "none"});
                                                });
                                        });
                                });
include 'file.txt';  // id="wb_element_instance601" class="wb_element";
include 'file.php';  // ul class="hmenu";
<?php include dirname(__FILES__).'/uk.zyro/<li class='active'><a
href='HOME/'
target='_self' title='HOME'>HOME</a></li>'; ?>
<?php include dirname(__FILES__).'/uk.zyro/<li class='active'><a
href='ROOMS/'
target='_self' title='ROOMS'>ROOMS</a></li>';
<?php include dirname(__FILES__).'/uk.zyro/<li class='active'><a
href='RESERVATIONS/' target='_self'
title='RESERVATIONS'>RESERVATIONS</a></li>';
?>
<?php include dirname(__FILES__).'/uk.zyro/<li class='active'><a
href='CONTACTS/' target='_self' title='CONTACTS'>CONTACTS</a></li>'; ?>
<?php include dirname(__FILES__).'/uk.zyro/<li class='active'><a
href='SITEMAP/'
target='_self' title='SITEMAP'>SITEMAP</a></li>'; ?>
<?php include dirname(__FILES__).'/uk.zyro/<li class='active'><a
href='AFFILIATE/' target='_self' title='AFFILIATE'>AFFILIATE</a></li>'; ?>
<?php include dirname(__FILES__).'/uk.zyro/<li class='active'><a
href='MEDIAS/'
target='_self' title='MEDIAS'>MEDIAS</a></li>'; ?>
if ((include 'vars.php') == 'OK') {
    echo 'OK';
}
$root = include 'return.php';

echo $root; // prints 'PHP'

$bar = include 'noreturn.php';

echo $bar; // prints 1
$string = get_include_contents('somefile.php');

function get_include_contents($filename) {
    if (is_file($filename)) {
        ob_start();
        include $filename;
        return ob_get_clean();
    }
    return false;
}
?>


Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2013-09-12 17:16 UTC] requinix@php.net
-Status: Open +Status: Feedback
 [2013-09-12 17:16 UTC] requinix@php.net
Not enough information was provided for us to be able
to handle this bug. Please re-read the instructions at
http://bugs.php.net/how-to-report.php

If you can provide more information, feel free to add it
to this bug and change the status back to "Open".

Thank you for your interest in PHP.


You've given no description of what the supposed bug is and the code you've 
provided is indecipherable and invalid.
 [2013-10-15 11:54 UTC] php-bugs at lists dot php dot net
No feedback was provided. The bug is being suspended because
we assume that you are no longer experiencing the problem.
If this is not the case and you are able to provide the
information that was requested earlier, please do so and
change the status of the bug back to "Re-Opened". Thank you.
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Fri Dec 27 00:01:30 2024 UTC