You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2003/02/24 00:14:04 UTC

DO NOT REPLY [Bug 17326] New: - security problem

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=17326>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=17326

security problem

           Summary: security problem
           Product: Apache httpd-1.3
           Version: 1.3.26
          Platform: PC
               URL: http://xxx
        OS/Version: Other
            Status: NEW
          Severity: Normal
          Priority: Other
         Component: Auth/Access
        AssignedTo: bugs@httpd.apache.org
        ReportedBy: nico@belcenter.com


Hello,

 I have installed Php with apache..

 When i edit a file , a temp file was created with ~ at the end of the file.

 So when i call xxx.php~ , i have the all codes in my browser !!!
 
 i have found 2 solutions, add the .php~ as php applications or add 
 a files match *~ to deny access. Is it possible to add a function 
 in apache to deny these files to all.. 

 Thanks
 Nico

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org