Ticket #183 (closed defect: fixed)
http://domain.com/symlink.php/ returns PHP source code instead of executing it.
| Reported by: | mpb.mail@… | Owned by: | jan |
|---|---|---|---|
| Priority: | highest | Milestone: | |
| Component: | mod_fastcgi | Version: | 1.4.13 |
| Severity: | normal | Keywords: | |
| Cc: | Blocked By: | ||
| Need User Feedback: | no | Blocking: |
Description
Create page.php:
<?php print 'PATH_INFO: '. $_SERVER['PATH_INFO']. "<br>\n"; print 'ORIG_PATH_INFO: '. $_SERVER['ORIG_PATH_INFO']. "<br>\n"; ?>
Then create a symbolic link with "ln -s page.php symlink.php".
Then compare:
http://domain.com/page.php/ http://domain.com/symlink.php/
The first will execute page.php, as expected.
The second returns the source code for symlink.php (as a file of type "BIN" that you need to save somewhere). This is wrong. It should execute the source code instead.
I'm running LightTPD 1.3.15 and PHP 5.0.4 via FastCGI on FreeBSD 5.3.
Additionally, the new ticket form does not list 1.3.15 as a version of LightTPD. It only lists 1.3.14 and 1.3.x-svn.
Attachments
Change History
Note: See
TracTickets for help on using
tickets.

