Slashdot Mirror

← Back to Stories (view on slashdot.org)

PHP Security & Exploit

Posted by Hemos on from the fixing-it dept.

Anonymous Coward writes "It looks like after a few weeks of rumors, an exploit for PHP/Apache under Linux surfaced. Luckily, PHP.net has the patch ready to go. While the export only claims to work for PHP up to 4.0.5, php.net also releases a patch for 4.1.1, the (until yesterday), latest version of php. This patch makes a small edition to the part of the source code (rfc1867.c) that is used by the exploit."

1 of 28 comments (clear)

  1. If you only speak PHP... by Paul+Burney · · Score: 2, Funny

    <?php

    if ($system != 'patched') {

    $file_uploads = 'Danger, Will Robinson!';

    }

    ?>

    --
    <?php while ($self != "asleep") { $sheep_count++; } ?>