php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #8389 Easy access to non-php files using php.exe
Submitted: 2000-12-23 14:29 UTC Modified: 2001-04-16 06:32 UTC
From: andy534 at hotmail dot com Assigned:
Status: Closed Package: Apache related
PHP Version: 4.0.4 OS: Windows 98
Private report: No CVE-ID: None
 [2000-12-23 14:29 UTC] andy534 at hotmail dot com
On my web server (Apache 1.3.12)  I installed php using cgi.  On my computer the path to php.exe d:/theserver/cgi-bin/php and on my intranet site it is http://intranet/cgi-bin/php  I use php and perl on my server, but I figured out a way to get the source of perl script by using php.exe.  If I had a file called printable.cgi.  I could get the source by typing http://intranet/cgi-bin/php/php/printable.cgi  

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2001-04-16 06:32 UTC] jmoore@php.net
you should use --force-cgi-redirect IIRC its called somthing like that this issue is well documented and you get warnings once you have configured about this too.

-James
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Fri Jun 14 07:01:49 2024 UTC