mirror of
https://github.com/php/php-src.git
synced 2026-10-29 10:22:06 +08:00
Gina Peter Banyard
34c686a5b4
Instead rely on the mechanism gated by the error_include_args INI to display them. This actually aligns the behaviour of what was accepted in https://wiki.php.net/rfc/display_error_function_args.
22 lines
625 B
PHP
22 lines
625 B
PHP
--TEST--
|
|
Bug #70264 (CLI server directory traversal)
|
|
--INI--
|
|
allow_url_fopen=1
|
|
--SKIPIF--
|
|
<?php
|
|
include "skipif.inc";
|
|
?>
|
|
--FILE--
|
|
<?php
|
|
include "php_cli_server.inc";
|
|
php_cli_server_start(null, null);
|
|
echo file_get_contents("http://" . PHP_CLI_SERVER_ADDRESS . "/..\\CREDITS");
|
|
echo file_get_contents("http://" . PHP_CLI_SERVER_ADDRESS . "/..%5CCREDITS");
|
|
?>
|
|
--EXPECTF--
|
|
Warning: file_get_contents(): Failed to open stream: HTTP request failed! HTTP/1.1 404 Not Found
|
|
in %sbug70264.php on line %d
|
|
|
|
Warning: file_get_contents(): Failed to open stream: HTTP request failed! HTTP/1.1 404 Not Found
|
|
in %sbug70264.php on line %d
|