[PHP-DEV] Bug #10323: 4.05-dev : non-html escaped strings on phpinfo From: bene <email protected>
Date: 04/13/01

From: bene <email protected>
Operating system: linux 2.4
PHP version: 4.0 Latest CVS (13/04/2001)
PHP Bug Type: *Function Specific
Bug description: 4.05-dev : non-html escaped strings on phpinfo

The PHPinfo() outputs data without running htmlspecialchars()

For example:
http://www.ispep.cx/phpinfo.php?>window.location='http://www.php.net';</script>

Keep up the great work, PHP is great!

-- 
Edit Bug report at: http://bugs.php.net/?id=10323&edit=1

-- PHP Development Mailing List <http://www.php.net/> To unsubscribe, e-mail: php-dev-unsubscribe <email protected> For additional commands, e-mail: php-dev-help <email protected> To contact the list administrators, e-mail: php-list-admin <email protected>