Bug #1574
After finding a pathinfo part in the path, the new path is not checked for symlinks
| Status: | Fixed | Start: | ||
| Priority: | Normal | Due date: | ||
| Assigned to: | - | % Done: | 0% |
|
| Category: | core | |||
| Target version: | 1.5.0 | |||
Description
server.follow-symlink = "disable" # + some fastcgi config for .php
Now create some test.php (e.g. phpinfo() ) and symlink it to symlink.php
Now:
- /symlink.php : 403 Forbidden
- /symlink.php/ : Output of test.php
History
Updated by stbuehler about 1 year ago
- Status changed from New to Fixed
- Resolution set to fixed
Fixed in r2093