File: bug70264.phpt

package info (click to toggle)
php7.0 7.0.33-0%2Bdeb9u8
  • links: PTS, VCS
  • area: main
  • in suites: stretch
  • size: 184,180 kB
  • sloc: ansic: 809,195; php: 22,035; sh: 11,873; cpp: 8,064; xml: 6,228; javascript: 2,546; yacc: 1,869; exp: 1,514; makefile: 1,231; pascal: 1,200; awk: 501; perl: 315; sql: 22
file content (21 lines) | stat: -rw-r--r-- 667 bytes parent folder | download | duplicates (4)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
--TEST--
Bug #70264 (CLI server directory traversal)
--INI--
allow_url_fopen=1
--SKIPIF--
<?php
include "skipif.inc";
?>
--FILE--
<?php
include "php_cli_server.inc";
php_cli_server_start(null, null);
echo file_get_contents("http://" . PHP_CLI_SERVER_ADDRESS . "/..\\CREDITS");
echo file_get_contents("http://" . PHP_CLI_SERVER_ADDRESS . "/..%5CCREDITS");
?>
--EXPECTF--
Warning: file_get_contents(http://%s/..\CREDITS): failed to open stream: HTTP request failed! HTTP/1.0 404 Not Found
 in %sbug70264.php on line %d

Warning: file_get_contents(http://%s/..%5CCREDITS): failed to open stream: HTTP request failed! HTTP/1.0 404 Not Found
 in %sbug70264.php on line %d