PHP :: Bug #11278 :: if i make a script that shows a file, the i can to show whatever on the hdd

Bug #11278	if i make a script that shows a file, the i can to show whatever on the hdd
Submitted:	2001-06-04 22:26 UTC	Modified:	2001-06-05 01:50 UTC
From:	jdibiase at velocom dot com dot ar	Assigned:
Status:	Not a bug	Package:	Scripting Engine problem
PHP Version:	4.0.5	OS:	linux
Private report:	No	CVE-ID:	None

View Add Comment Developer Edit

[2001-06-04 22:26 UTC] jdibiase at velocom dot com dot ar

showhtml.php?page=../../aa.htm

script:

include($page);


if i call this script with 
showhtml.php?page=../../../../../../../../../../../../../../../../etc/passwd

it shows me that file.....

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports

[2001-06-05 01:50 UTC] sniper@php.net

This is not a bug in PHP but in your script:

http://www.php.net/manual/en/security.php

PHP is not responsible for handling this kind of security
issues.

--Jani

	php.net \| support \| documentation \| report a bug \| advanced search \| search howto \| statistics \| random bug \| login
go to bug id or search bugs for


Copyright © 2001-2024 The PHP Group All rights reserved.	Last updated: Sat Apr 20 04:01:28 2024 UTC