Ticket #1574 (closed defect: fixed)

Opened 2 months ago

Last modified 2 months ago

After finding a pathinfo part in the path, the new path is not checked for symlinks

Reported by: stbuehler Assigned to: jan
Priority: normal Milestone: 1.5.0
Component: core Version: 1.4.18
Severity: normal Keywords:
Cc: Blocking:
Need Feedback: 0

Description 

server.follow-symlink = "disable"
# + some fastcgi config for .php

Now create some test.php (e.g. phpinfo() ) and symlink it to symlink.php

Now:

  • /symlink.php : 403 Forbidden
  • /symlink.php/ : Output of test.php

Attachments

Change History

02/26/2008 04:32:38 PM changed by stbuehler

  • status changed from new to closed.
  • resolution set to fixed.

Fixed in [2093]

Add/Change #1574 (After finding a pathinfo part in the path, the new path is not checked for symlinks)




Change Properties
Action