File: include_var.phpt

package info (click to toggle)
php-suhosin 0.9.12-1etch1
  • links: PTS
  • area: main
  • in suites: etch, etch-m68k
  • size: 596 kB
  • ctags: 745
  • sloc: ansic: 7,576; makefile: 100; sh: 34; php: 15
file content (18 lines) | stat: -rw-r--r-- 457 bytes parent folder | download | duplicates (3) 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
 
--TEST--
Include "Variable URL";
--SKIPIF--
<?php include "../skipifcli.inc"; ?>
--INI--
suhosin.log.syslog=0
suhosin.log.sapi=255
suhosin.log.script=0
suhosin.log.phpscript=0
suhosin.executor.include.whitelist=
suhosin.executor.include.blacklist=
--FILE--
<?php
    $var = "http://127.0.0.1/";
    include $var;
?>
--EXPECTF--
ALERT - Include filename ('http://127.0.0.1/') is an URL that is not allowed (attacker 'REMOTE_ADDR not set', file '%s', line 3)