Vulnerability Development mailing list archives

Re: A note about PHP and path disclosure errors


From: Brian Poole <raj () cerias purdue edu>
Date: Thu, 28 Mar 2002 15:23:00 -0500

Quoting rain forest puppy (rfp () wiretrip net) from 26 March 2002:

register_globals and disabling furl_open_wrapper too.

I am guessing you mean to say allow_url_fopen here? I see nothing
about furl_open_wrapper anywhere.

; Whether to allow the treatment of URLs (like http:// or ftp://) as files.
allow_url_fopen = Off


-b


Current thread: