[PHP-DEV] Bug #14751: [critical!] mozilla downloads source of .php files

[jm]

From: [EMAIL PROTECTED]
Operating system: redhat 7.1 glibc2.2.4 kernel2.4
PHP version:  4.1.1
PHP Bug Type: Apache related
Bug description:  [critical!] mozilla downloads source of .php files

I don't exactly understand how this happens, but with a Apache+mod_ssl
server, Mozilla 0.9.7 is able to retrieve the source of a .php file,
probably by sending non-standard headers.

Software used:
- Apache 1.3.22
- mod_ssl 2.8.5
- php 4.1.1
- VirtualHost on port 443 with SSLEngine On.
- "AddHandler application/x-httpd-php .php"

Test URL: https://secure.mkmgmbh.com/horde/test.php

Using Internet Explorer 6, you get the compiled page, using Mozilla 0.9.7
it downloads the source, same url, different behaviour.

Please note that the server uses a non-standard certificate (signed by our
own CA).


[Configure line: './configure' '--prefix=/httpd/php'
'--with-apxs=/httpd/bin/apxs' '--with-config-file-path=/httpd/conf'
'--with-gdbm=/usr' '--with-mysql=/usr' '--with-openssl=/usr'
'--with-vpopmail=/home/vpopmail' '--with-gettext' '--with-xml'
'--with-mcrypt=/usr' '--with-imap=/projects/serverupd/imap/imap-2001a'
'--with-zlib=/usr']


-- 
Edit bug report at: http://bugs.php.net/?id=14751&edit=1


-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] Bug #14424 Updated: is_readable returns error if file does not exist.

[jm]

ID: 14424
User updated by: [EMAIL PROTECTED]
Reported By: [EMAIL PROTECTED]
Status: Open
Bug Type: Documentation problem
Operating System: Suse linux 7.2
PHP Version: 4.1.0
New Comment:

So that is what you call downwards compatible?
I build a site under 4.0.6, it works fine.
There is an update to PHP, my sites break.


Previous Comments:


[2001-12-12 06:40:15] [EMAIL PROTECTED]

So what's the problem? is_readable now returns an error, which is IMHO fine. The only 
problem is that it's not documented. Changing to docu prob.



[2001-12-11 08:22:39] [EMAIL PROTECTED]

Code example:
if (is_readable("foo")) {
echo "file exists.";
} else {
echo "file does not exist.";
}

Error message:
Warning: stat failed for foo (errno=2 - No such file or directory) in 
/home/xxx/public_html/is_readable.php on line 3

Configure options:
./configure --with-apache=/home/xxx/apache_1.3.22 --with-mysql=/usr/local 
--with-gd=/usr/local --with-zlib-dir=/usr/local --with-png-dir=/usr 
--with-jpeg-dir=/home/xxx/jpeg-6b --with-xpm-dir=/usr/X11R6  --with-ttf  --with-curl

Seems similar to is_file() bug. Problem does not occur on older versions (i.e. 4.0.6).






Edit this bug report at http://bugs.php.net/?id=14424&edit=1


-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] Bug #14424: is_readable returns error if file does not exist.

[jm]

From: [EMAIL PROTECTED]
Operating system: Suse linux 7.2
PHP version:  4.1.0
PHP Bug Type: Filesystem function related
Bug description:  is_readable returns error if file does not exist.

Code example:
if (is_readable("foo")) {
echo "file exists.";
} else {
echo "file does not exist.";
}

Error message:
Warning: stat failed for foo (errno=2 - No such file or directory) in
/home/xxx/public_html/is_readable.php on line 3

Configure options:
./configure --with-apache=/home/xxx/apache_1.3.22 --with-mysql=/usr/local
--with-gd=/usr/local --with-zlib-dir=/usr/local --with-png-dir=/usr
--with-jpeg-dir=/home/xxx/jpeg-6b --with-xpm-dir=/usr/X11R6  --with-ttf 
--with-curl

Seems similar to is_file() bug. Problem does not occur on older versions
(i.e. 4.0.6).

-- 
Edit bug report at: http://bugs.php.net/?id=14424&edit=1


-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]