PHP :: Bug #732 :: Password not stripped from http URLs when printing error

Bug #732	Password not stripped from http URLs when printing error
Submitted:	1998-09-09 12:06 UTC	Modified:	1998-09-11 19:47 UTC
From:	enrik at fun dot de	Assigned:
Status:	Closed	Package:	Other
PHP Version:	3.0.3	OS:	Linux
Private report:	No	CVE-ID:	None

View Add Comment Developer Edit

[1998-09-09 12:06 UTC] enrik at fun dot de

When opening an URL like in
include("http://include:pass@include.ser.ver/blah.inc")
fails, the password is not removed from the error message.
This happens obviously since php3_strip_url_passwd() is
constrained to ftp URLs.

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports

[1998-09-11 19:47 UTC] zeev

Fixed, generalized the URL password stripping to work with all protocols.

	php.net \| support \| documentation \| report a bug \| advanced search \| search howto \| statistics \| random bug \| login
go to bug id or search bugs for


Copyright © 2001-2024 The PHP Group All rights reserved.	Last updated: Mon Apr 29 11:01:32 2024 UTC