Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
--TEST-- Testing suhosin.executor.include.max_traversal=10 --DESCRIPTION-- Seems to work f..
Decoded Output download
--TEST--
Testing suhosin.executor.include.max_traversal=10
--DESCRIPTION--
Seems to work fine, maybe split up later into multiple test cases.
--SKIPIF--
<?php include "../skipifcli.inc"; ?>
--INI--
suhosin.log.syslog=0
suhosin.log.sapi=255
suhosin.log.script=0
suhosin.log.phpscript=0
error_reporting=0
suhosin.executor.include.whitelist=
suhosin.executor.include.blacklist=
suhosin.executor.include.max_traversal=10
--FILE--
<?php
if ($included === TRUE) { echo "$case INCLUDED!
";return; }
$included = TRUE;
$case = "C1"; include("/../../../../../../../../../" . __FILE__);
$case = "C2"; include("/.././.././.././.././.././.././.././.././../" . __FILE__);
$case = "C3"; include("/.././.././.././.././.././.././.././.././.././../" . __FILE__);
$case = "C4"; include("/../../../../../../../../../../" . __FILE__);
$case = "C5"; include("/../../../../../../../../../../../" . __FILE__);
$case = "C6"; include("/.././.././.././.././.././.././.././.././../" . __FILE__);
?>
--EXPECTF--
C1 INCLUDED!
C2 INCLUDED!
ALERT - Include filename ('/.././.././.././.././.././.././.././.././.././../%s') contains too many '../' (attacker 'REMOTE_ADDR not set', file '%s', line 7)
Did this file decode correctly?
Original Code
--TEST--
Testing suhosin.executor.include.max_traversal=10
--DESCRIPTION--
Seems to work fine, maybe split up later into multiple test cases.
--SKIPIF--
<?php include "../skipifcli.inc"; ?>
--INI--
suhosin.log.syslog=0
suhosin.log.sapi=255
suhosin.log.script=0
suhosin.log.phpscript=0
error_reporting=0
suhosin.executor.include.whitelist=
suhosin.executor.include.blacklist=
suhosin.executor.include.max_traversal=10
--FILE--
<?php
if ($included === TRUE) { echo "$case INCLUDED!\n";return; }
$included = TRUE;
$case = "C1"; include("/../../../../../../../../../" . __FILE__);
$case = "C2"; include("/.././.././.././.././.././.././.././.././../" . __FILE__);
$case = "C3"; include("/.././.././.././.././.././.././.././.././.././../" . __FILE__);
$case = "C4"; include("/../../../../../../../../../../" . __FILE__);
$case = "C5"; include("/../../../../../../../../../../../" . __FILE__);
$case = "C6"; include("/.././.././.././.././.././.././.././.././../" . __FILE__);
?>
--EXPECTF--
C1 INCLUDED!
C2 INCLUDED!
ALERT - Include filename ('/.././.././.././.././.././.././.././.././.././../%s') contains too many '../' (attacker 'REMOTE_ADDR not set', file '%s', line 7)
Function Calls
None |
Stats
MD5 | 32c2bc8d564f62c6f790824cca5a6901 |
Eval Count | 0 |
Decode Time | 102 ms |