From:             [EMAIL PROTECTED]
Operating system: Linux 2.4.18
PHP version:      4.2.0
PHP Bug Type:     Scripting Engine problem
Bug description:  Safe Mode settings do not affect show_source

On a system with safe_mode enabled,
show_source() function will be able to show contents of any file.

ex.
<?php
show_source("/etc/passwd");
?>
-- 
Edit bug report at http://bugs.php.net/?id=17155&edit=1
-- 
Fixed in CVS:        http://bugs.php.net/fix.php?id=17155&r=fixedcvs
Fixed in release:    http://bugs.php.net/fix.php?id=17155&r=alreadyfixed
Need backtrace:      http://bugs.php.net/fix.php?id=17155&r=needtrace
Try newer version:   http://bugs.php.net/fix.php?id=17155&r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=17155&r=support
Expected behavior:   http://bugs.php.net/fix.php?id=17155&r=notwrong
Not enough info:     http://bugs.php.net/fix.php?id=17155&r=notenoughinfo
Submitted twice:     http://bugs.php.net/fix.php?id=17155&r=submittedtwice
register_globals:    http://bugs.php.net/fix.php?id=17155&r=globals

Reply via email to