ID:               28556
 User updated by:  floeff at arcor dot de
 Reported By:      floeff at arcor dot de
-Status:           Feedback
+Status:           Open
 Bug Type:         CGI related
 Operating System: Linux 2.4
 PHP Version:      4.3.6
 New Comment:

Okay, here we go:

./configure --enable-safe-mode --with-mysql --enable-discard-path
--with-exec-dir --enable-memory-limit --with-mm && make && make
install

cp php.ini-dist /usr/local/lib/php.ini

echo ':PHP:E::php::/usr/local/bin/php:' >
/proc/sys/fs/binfmt_misc/register
echo ':PHP3:E::php3::/usr/local/bin/php:' >
/proc/sys/fs/binfmt_misc/register
echo ':PHP4:E::php4::/usr/local/bin/php:' >
/proc/sys/fs/binfmt_misc/register

Changes in php.ini:
expose_php = Off
disable_functions = phpinfo
allow_url_fopen = Off

In httpd.conf of Apache2:

AddHandler cgi-script .cgi .pl .php .php3 .php4


Previous Comments:
------------------------------------------------------------------------

[2005-02-06 06:57:15] [EMAIL PROTECTED]

Come up with configuration that isn't "security threat" to you and put
it here..


------------------------------------------------------------------------

[2005-02-05 19:07:17] floeff at arcor dot de

I don't post my (maybe security-related) configuration to the public,
sorry. Any e-mail address I could mail it to?

------------------------------------------------------------------------

[2005-02-05 03:40:03] [EMAIL PROTECTED]

DO NOT email anything to me!! Put any details needed to reproduce this
bug here, via this url:

http://bugs.php.net/bug.php?id=28556&edit=2



------------------------------------------------------------------------

[2005-02-03 21:05:48] floeff at arcor dot de

Unfortunately, I have no test system to try.
If you want, I can mail you my documentation privately (via PM), so you
can check it out.

------------------------------------------------------------------------

[2005-02-03 19:25:49] [EMAIL PROTECTED]

And it still happens with latest CVS snapshot?

------------------------------------------------------------------------

The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
    http://bugs.php.net/28556

-- 
Edit this bug report at http://bugs.php.net/?id=28556&edit=1

Reply via email to