Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.php > #4464

Re: Why and wherefore file downloads

Path csiph.com!x330-a1.tempe.blueboxinc.net!usenet.pasdenom.info!weretis.net!feeder4.news.weretis.net!news.musoftware.de!wum.musoftware.de!fu-berlin.de!uni-berlin.de!not-for-mail
From "M. Strobel" <sorry_no_mail_here@nowhere.dee>
Newsgroups comp.lang.php
Subject Re: Why and wherefore file downloads
Date Sun, 15 Jan 2012 00:06:23 +0100
Lines 36
Message-ID <9neg3fFicpU1@mid.uni-berlin.de> (permalink)
References <87ehv25dm4.fsf@newsguy.com>
Mime-Version 1.0
Content-Type text/plain; charset=UTF-8
Content-Transfer-Encoding 7bit
X-Trace news.uni-berlin.de Hc7MZzBI4EdeFzWHc3T+Cw47LojklY41Y+cqet0a5gvGmxj4w=
User-Agent Mozilla/5.0 (X11; U; Linux x86_64; de; rv:1.9.2.24) Gecko/20111101 SUSE/3.1.16 Lightning/1.0b2 Thunderbird/3.1.16
In-Reply-To <87ehv25dm4.fsf@newsguy.com>
Xref x330-a1.tempe.blueboxinc.net comp.lang.php:4464

Show key headers only | View raw

Am 14.01.2012 19:43, schrieb Harry Putnam:
---cut
> -------        ---------       ---=---       ---------      -------- 
> From_mohitsharma.net.php
> 
> php
> 
> <?php
>    // The file path where the file exists
>    $filepath = "**HERE**".$_GET['filename']."";
---cut

>    @readfile($filepath);
>   ?>
--------------cut

> ------- 8< snip ---------- 8< snip ---------- 8<snip ------- 
> #!/usr/bin/perl
> 
> use strict;
> use warnings;
> use diagnostics;
> 
> my ($frdir,$reg, @files, $php);
> $php = './Frommohitsharma.net.php';

your perl calls Frommohitsharma.net.php, but you print  From_mohitsharma.net.php.

You are calling a different script.

This is the only explanation because the parameter filepath is used unchanged in the
readfile() function and it should not work if you change it.

BTW, this looks terribly unsecure.

/Str.

Back to comp.lang.php | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Why and wherefore file downloads Harry Putnam <reader@newsguy.com> - 2012-01-14 13:43 -0500
  Re: Why and wherefore file downloads "M. Strobel" <sorry_no_mail_here@nowhere.dee> - 2012-01-15 00:06 +0100
    Re: Why and wherefore file downloads Harry Putnam <reader@newsguy.com> - 2012-01-16 20:01 -0500
      Re: Why and wherefore file downloads "M. Strobel" <sorry_no_mail_here@nowhere.dee> - 2012-01-18 09:21 +0100

csiph-web