php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #8389 Easy access to non-php files using php.exe
Submitted: 2000-12-23 14:29 UTC Modified: 2001-04-16 06:32 UTC
From: andy534 at hotmail dot com Assigned:
Status: Closed Package: Apache related
PHP Version: 4.0.4 OS: Windows 98
Private report: No CVE-ID: None
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: andy534 at hotmail dot com
New email:
PHP Version: OS:

 

 [2000-12-23 14:29 UTC] andy534 at hotmail dot com
On my web server (Apache 1.3.12)  I installed php using cgi.  On my computer the path to php.exe d:/theserver/cgi-bin/php and on my intranet site it is http://intranet/cgi-bin/php  I use php and perl on my server, but I figured out a way to get the source of perl script by using php.exe.  If I had a file called printable.cgi.  I could get the source by typing http://intranet/cgi-bin/php/php/printable.cgi  

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2001-04-16 06:32 UTC] jmoore@php.net
you should use --force-cgi-redirect IIRC its called somthing like that this issue is well documented and you get warnings once you have configured about this too.

-James
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Thu Dec 26 13:01:30 2024 UTC