[Full-Disclosure] Re: [FD] VERY HIGH VULNERABILITY DISCLOSURE !!! MASS ROOT POSSIBLE !!! PLEASE BE ATTENTIVE !!!

From: Thomas Binder (full-disclosure_at_arago.de)
Date: 07/05/04

  • Next message: Georgi Guninski: "Re: [Full-Disclosure] Public Review of OIS Security Vulnerability Reporting and Response Guidelines" 
    To: full-disclosure@lists.netsys.com
Date: Mon, 5 Jul 2004 14:30:05 +0200

    Hi!

    On Sat, Jul 03, 2004 at 06:18:59PM +0200, Rudolf Polzer wrote:
    > IMHO it will be nice if one could override some php.ini settings
    > on a per-script basis.

    When using PHP as an Apache module, you can achieve something like
    that in httpd.conf:

    <Location /path/to/broken/script.php
            php_admin_flag register_globals on
    </Location>

    <Location /path/to/sane/script.php
            php_admin_flag register_globals off
    </Location>

    Ciao

    Thomas

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html

  • Next message: Georgi Guninski: "Re: [Full-Disclosure] Public Review of OIS Security Vulnerability Reporting and Response Guidelines"

    Relevant Pages

    • Re: Php5 port and Apache Module
      ... possible to install php5 from the packages .. ... in any way of justifying removing the apache module from the default setting ... people installing php do so for use as an apache module. ...
      (freebsd-questions)
    • Re: Extension files not loading
      ... If an Apache module doesn't use those files it is not necessary to load ... the newsgroup - and it's way too long for a newsgroup, ... You want to use more than one PHP version? ... along with PHP and they both have LibMySQL.dll in distro. ...
      (comp.lang.php)
    • Re: sendmail config double check
      ... > my bsd LAMP machine won't send any emails through php. ... > now, if my brain is straight, these settings should reject outside ... e-mail without an MTA process in there somewhere, ... I'm not exactly sure how PHP sends e-mail on a Unix system. ...
      (freebsd-questions)
    • Re: What are the pros and cons of running php as a regular CGI
      ... Personally I would not accept these "drawbacks". ... company to offer PHP as an Apache module so I can have the FULL power of ... Apache and PHP at my disposal. ... > regular CGI by default. ...
      (comp.lang.php)
    • Re: does the phpinfo() command ever lie?
      ... > If you are using PHP as an Apache module, ... > module AND the CGI). ... I'm dealing with an Apache module version of PHP? ...
      (comp.lang.php)
    • Quantcast