Re: [Full-Disclosure] Re: Information Disclosure with Invision Board installation (fwd)

From: Gossi The Dog (gossiat_private)
Date: Wed Sep 25 2002 - 04:13:27 PDT

  • Next message: Gossi The Dog: "[Full-Disclosure] Re: Information Disclosure with Invision Board installation (fwd)"

    On Wed, 25 Sep 2002, Ka wrote:
    
    > -----BEGIN PGP SIGNED MESSAGE-----
    > Hash: SHA1
    > 
    > At Mittwoch, 25. September 2002 01:55 Rossen wrote:
    > > Fortunately phpinfo() is disabled in safe mode, 
    > > which is a must for a "production server".
    > 
    > Good idea. But this is not happening on apache
    > mod_php4 or am I missing something?
    > 
    > - ------------ output from phpinfo() ----------
    > PHP Version 4.0.6
    > ...
    > Directive	Local Value	Master Value
    > ...
    > safe_mode	On		On
    > - ---------------------------------------------
    
    I've checked this with PHP4 too, and get the same behaviour.  I presume 
    phpinfo() can be disabled somewhere in the conf files for safe mode.  Is 
    it by default, one wonders.
    
    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html
    



    This archive was generated by hypermail 2b30 : Wed Sep 25 2002 - 03:53:43 PDT