Our server went down when we did this :


--filename: documentroot/ index.php---
<?
        include($file);
?>


and in our browser :


http://oursite/index.php?file=index.php



Ok.. it's of course stupid if you do this (it was a test). But it
actually crashed our box. (we want to provide users with an homepage
where they can use mysql + php4 , so we did a few tests).

We run apache as user apache:deamons on a linux 2.2.17-pre6 with
openwall patch kernel. (It's a redhat box). Php was compiled with mysql
support.

http://www.netbox.nu (if it's up again :) since we have to ride to it)




-- 
Philip van Hoof aka freax         _/_/_/                                
http://users.pandora.be/skatan  _/_/  _/ _/_/   _/_/_/    _/_/   _/   _/
mailto:freax@pandora.be        _/_/     _/ _/  _/       _/  _/   _/  _/ 
I could be bought, but Linux_/_/_/_/   _/  _/ _/_/    _/_/_/_/   _/_/   
couldn't be. (Linus Torvalds _/_/     _/     _/      _/    _/  _/  _/   
8 Sept. 1996)               _/_/     _/