|
|
S-153: AmpJuke 'index.php' Vulnerability
|
|
APACHE_LOOKUP_URI(3) 1 APACHE_LOOKUP_URI(3) apache_lookup_uri - Perform a partial request for the specified URI and return all info about it SYNOPSIS
object apache_lookup_uri (string $filename) DESCRIPTION
This performs a partial request for a URI. It goes just far enough to obtain all the important information about the given resource. This function is supported when PHP is installed as an Apache module or by the NSAPI server module in Netscape/iPlanet/SunONE webservers. PARAMETERS
o $filename - The filename (URI) that's being requested. RETURN VALUES
An object of related URI information. The properties of this object are: ostatus othe_request ostatus_line omethod ocontent_type ohandler ouri ofilename opath_info oargs oboundary ono_cache ono_local_copy oallowed osend_bodyct obytes_sent obyterange oclength ounparsed_uri omtime orequest_time EXAMPLES
Example #1 apache_lookup_uri(3) example <?php $info = apache_lookup_uri('index.php?var=value'); print_r($info); if (file_exists($info->filename)) { echo 'file exists!'; } ?> The above example will output something similar to: stdClass Object ( [status] => 200 [the_request] => GET /dir/file.php HTTP/1.1 [method] => GET [mtime] => 0 [clength] => 0 [chunked] => 0 [content_type] => application/x-httpd-php [no_cache] => 0 [no_local_copy] => 1 [unparsed_uri] => /dir/index.php?var=value [uri] => /dir/index.php [filename] => /home/htdocs/dir/index.php [args] => var=value [allowed] => 0 [sent_bodyct] => 0 [bytes_sent] => 0 [request_time] => 1074282764 ) file exists! PHP Documentation Group APACHE_LOOKUP_URI(3)
