RedEnchilada (notice the lack of a space) (redenchilada)'s status on Sunday, 28-Jul-13 01:53:40 UTC

  1. RedEnchilada (notice the lack of a space) RedEnchilada (notice the lack of a space)

    @dalecooper The method I used was editing php.ini and setting cgi.fix_pathinfo=0; it means it'll error out if the exact requested file isn't found. Otherwise they could do /uploaded_file.txt/blah.php and execute PHP code included in the text file. Just check http://wiki.nginx.org/Pitfalls#Passing_Uncontrolled_Requests_to_PHP real quick.

    Sunday, 28-Jul-13 01:53:40 UTC from web in context