CooLynX Posted February 18, 2003 Report Share Posted February 18, 2003 Informācija par jauno versiju ir atrodama http://lv.php.net/release_4_3_1.php bet lejupielādēt var te http://lv.php.net/downloads.php Populārajā skriptinga valodā PHP 4.3.0 versijā atradies gļuks, kas ļauj apiet drošības metodes, kas skriptiem liedz piekļūt dažādiem failiem, kad PHP tiek laists CGI modē. Tas ir, --force-cgi-redirect opcijai kompilējot un php.ini opcijai cgi.force_redirect nav jēgas. no http://hackers.lv/?id=1256 P.S. kādreiz taču ir jāsāk kaut ko postot, vai ne? :P Link to comment Share on other sites More sharing options...
Delfins Posted February 18, 2003 Report Share Posted February 18, 2003 for windows tikai noderees, linuxisti seezh tankaa (maybe maldos) Link to comment Share on other sites More sharing options...
sarcasm Posted February 18, 2003 Report Share Posted February 18, 2003 Nee, tankaa seezh tie, kas php izmanto kaa SAPI moduli nevis CGI versiju. Link to comment Share on other sites More sharing options...
murks98 Posted February 19, 2003 Report Share Posted February 19, 2003 ISAPI, ne SAPI :P P.S. kaadi argumenti runaa par labu ISAPI, un kaadi - CGI variantam, ja iespeejami abi? Link to comment Share on other sites More sharing options...
BigUgga Posted February 19, 2003 Report Share Posted February 19, 2003 kaa modulis - viens liels pluss ir ka nav jaalaadee php binaarijs pie katra pieprasiijuma. cgi pluss ir, ka var izmantot suexec, t.i., laist apaci ar katra atseviska usera tiesiibaam Link to comment Share on other sites More sharing options...
Roze Posted February 19, 2003 Report Share Posted February 19, 2003 Hmm a kaads sakars php ar apache suexec? CGI variantu principaa izmanto tajos gadijumos kad webserverim (taadu nav nemaz tik maz piem Boa, thttpd, Hydra) nav uztaisiits savietojams modulis vai webservera interfeiss taadus nemaz neatbalsta tachu atljauj externaalas lietas.. Link to comment Share on other sites More sharing options...
Recommended Posts