SecurityFocus

[PHP Bug] How to hide a HTTP request in the apache logs Aug 06 2004 11:25PM
Anthony Debhian (anthony debhian only-for info) (2 replies)

Re: [PHP Bug] How to hide a HTTP request in the apache logs Aug 09 2004 09:14PM
Max Valdez (maxvalde fis unam mx)

works on Apache/2.0.50 PHP 4.3.8
over gentoo.

The subject is a little bit missleading, because the user has to be able to
insert the code under documento root. Cant see any security concern on that
code with social engeniering not involved.

Max

--
Linux garaged 2.6.7-rc3-mm2 #2 Sat Jun 19 15:43:32 CDT 2004 i686 Intel(R)
Pentium(R) 4 CPU 2.80GHz GenuineIntel GNU/Linux
-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GS/S d- s: a-29 C++(+++) ULAHI+++ P+ L++>+++ E--- W++ N* o-- K- w++++ O- M--
V-- PS+ PE Y-- PGP++ t- 5- X+ R tv++ b+ DI+++ D- G++ e++ h+ r+ z**
------END GEEK CODE BLOCK------
gpg-key: http://garaged.homeip.net/gpg-key.txt

[ reply ]

Re: [PHP Bug] How to hide a HTTP request in the apache logs Aug 09 2004 03:36PM
Steve Brown (sbrown truckstuffusa com)