php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #24906 Why can you view the page "http://bugs.php.net/report.php/"
Submitted: 2003-08-01 11:16 UTC Modified: 2003-08-06 11:07 UTC
From: kim at showtop dot net Assigned:
Status: No Feedback Package: Website problem
PHP Version: 4.3.2 OS: any systems
Private report: No CVE-ID: None
View Developer Edit
 [2003-08-01 11:16 UTC] kim at showtop dot net 
Description:
------------
http://bugs.php.net/report.php/
Why can you view the page "http://bugs.php.net/report.php/"?
the logo images path is "http://bugs.php.net/report.php/gifs/logo-bug.gif", why?
have any safety problem?The PHP BUG or the web server bug? or it ism't a bug ?

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2003-08-01 14:15 UTC] pollita@php.net 
Are you being linked to this page from somewhere?  Or did you just happen to typo it into your browser's address bar?
 [2003-08-01 14:24 UTC] goba@php.net 
The Apache server has a feature to check for files traversing back the given path, if is the exact path is not found as a file. Then the PHP file in this case can handle the URL part used after it's name. This is a commonly used technique, which has side effects like the one you have found.

The images are printed into the output with relative path references, so this is why the path is not OK in this case (as the browser parses the relative path before asking the server for the file).

It would be a solution for this case to fix the images to use 'site relative' path values, ie src="/gifs/..." instead of "gifs/..."
 [2003-08-06 11:07 UTC] sniper@php.net 
No feedback was provided. The bug is being suspended because
we assume that you are no longer experiencing the problem.
If this is not the case and you are able to provide the
information that was requested earlier, please do so and
change the status of the bug back to "Open". Thank you.
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved. 		Last updated: Sun Dec 22 06:01:30 2024 UTC