full-disclosure - Re: Information Disclosure with Invision Board installation (fwd)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <200209250908.04201.ka@khidr.net>
From: ka at khidr.net (Ka)
Subject: Re: Information Disclosure with Invision Board installation (fwd)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

At Mittwoch, 25. September 2002 01:55 Rossen wrote:
> Fortunately phpinfo() is disabled in safe mode, 
> which is a must for a "production server".

Good idea. But this is not happening on apache
mod_php4 or am I missing something?

- ------------ output from phpinfo() ----------
PHP Version 4.0.6
...
Directive	Local Value	Master Value
...
safe_mode	On		On
- ---------------------------------------------

Greetings
Ka
- -- 
"It's the perfect time of day
to throw all your cares away"  Barenaked Ladies
http://www.khidr.net/users/ka/pgpkey.asc
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE9kWC672vu22ltWBERAjTOAJsG2THVHDPlXQXihfO3YtODfz3ElwCfa/kR
XddFk58SIwm7qL86/RP/tHE=
=u8aa
-----END PGP SIGNATURE-----