FUDforum: FUDforum 3.0+

Home » FUDforum Development » FUDforum 3.0+ » php.php

Show: Today's Messages :: Polls :: Message Navigator

php.php [message #24705]

Tue, 10 May 2005 14:16

danger

Messages: 11
Registered: May 2005
Location: Slovakia

Karma: 0

Junior Member

what is this peace of code in php.php good for?
(I know what is it good for, I mean, why is it there?!)

if (md5(stripslashes(urldecode($_GET['key']))) == 'e98765ea19068eac2d18a4e23be275c7') {
phpinfo();
}

Report message to a moderator

Re: php.php [message #24707 is a reply to message #24705]

Tue, 10 May 2005 15:11

JamesS

Messages: 275
Registered: July 2002
Location: Atlanta, GA

Karma: 0

Senior Member

It is used by the authors to view the PHP configuration on servers they are trying to help diagnose problems on. At least, that is why I assume that it is there.

Report message to a moderator

Re: php.php [message #24709 is a reply to message #24705]

Tue, 10 May 2005 15:57

danger

Messages: 11
Registered: May 2005
Location: Slovakia

Karma: 0

Junior Member

I thought so, but never seen this before in any other php products.

this peace of code is able to make feel somebody, that developers of FUDforum are people who want to get some internal server's info...

Report message to a moderator

Re: php.php [message #24710 is a reply to message #24705]

Tue, 10 May 2005 16:03

JamesS

Messages: 275
Registered: July 2002
Location: Atlanta, GA

Karma: 0

Senior Member

I don't know of any information that is reported by phpinfo() that can be used in a malicious manner which can't be assertained by just issuing the proper HTTP headers to the server through a telnet session.

Report message to a moderator

Re: php.php [message #24735 is a reply to message #24705]

Thu, 12 May 2005 21:31

Ilia

Messages: 13241
Registered: January 2002

Karma: 0

Senior Member
Administrator
Core Developer

It's a debugging tool for when there is a problem, most large applications have an instance of such a file. If you can't spot it, you haven't looked hard enough.

FUDforum Core Developer

Report message to a moderator

Previous Topic:	New error
Next Topic:	HTML Cleanup

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Sat Nov 23 01:59:13 GMT 2024

Total time taken to generate the page: 0.02371 seconds