php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #30425 Bad URL with include causes apache spawns, leading to crash
Submitted: 2004-10-13 21:52 UTC Modified: 2004-10-14 01:01 UTC
From: noel at noeljackson dot com Assigned:
Status: Not a bug Package: Reproducible crash
PHP Version: Irrelevant OS: FreeBSD
Private report: No CVE-ID: None
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: noel at noeljackson dot com
New email:
PHP Version: OS:

 

 [2004-10-13 21:52 UTC] noel at noeljackson dot com
Description:
------------
When using the include() function that includes an 
improper URL AND a variable, PHP does not return an 
error, instead spawns instance after instance of httpd 
creating server hault.

The include function that produced this is something 
like the following...

<?php require('http://noeljackson/?template=/templates/
lastFive.tmpl.php?start='.$_GET['start']); ?>

The problem with the URL is a & after .tmpl.php instead 
of a &

Try it in a PHP document, ANY, and it will create many, 
many, many instances of httpd, resulting eventually in a 
server hault.

Reproduce code:
---------------
<?php  
require('http://noeljackson/?template=/templates/lastFive.tmpl.php?start='.$_GET['start']); ?>

Expected result:
----------------
Return an error.

Actual result:
--------------
Spawning of httpd creating an eventual server hault.

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2004-10-14 01:01 UTC] iliaa@php.net
Sorry, but your problem does not imply a bug in PHP itself.  For a
list of more appropriate places to ask for help using PHP, please
visit http://www.php.net/support.php as this bug system is not the
appropriate forum for asking support questions. 

Thank you for your interest in PHP.

not a bug. You've created a request loop.
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved.
Last updated: Sun Jul 13 09:01:32 2025 UTC