#4853 - Page parameters with '..' in, cause a fatal PHP error if static caching enabled
-
By Chris Graham
- Added
- 1 view
| Identifier | #4853 |
|---|---|
| Issue type | Trivial issue (does not break functionality) |
| Title | Page parameters with '..' in, cause a fatal PHP error if static caching enabled |
| Status | Completed |
| Handling member | Chris Graham |
| Version | 10.0.42 |
| Addon | core |
| Description | A hack-bot may try a URL like: index.php?page=../etc/passwd This will trigger Composr's hack-attack detection system. If static caching is enabled, this happens early in boot and causes a fatal error (logged to the error log). |
| Steps to reproduce | |
| Funded? | No |
| Commits |
The system will post a comment when this issue is modified (e.g., status changes). To be notified of this, click "Enable comment notifications".
Comments
There have been no comments yet