WebApp Sec mailing list archives

Re: PHP Easter Eggs


From: "Serban Gh. Ghita" <serban () verasys ro>
Date: Tue, 30 Nov 2004 06:19:05 +0200

sorry for the double posting.
you must have the "expose_php" value in your php.ini set to ON to display
such images, which is risky.

for example the dog is displayed if php is > 4.3.0 and with the funny coder
if the php version is 4.2.3 or below.

btw: ?=PHPE9568F35-D428-11d2-A769-00AA001ACF42 displays the Zend Logo

Serban Gh. Ghita
coordonator departament IT
VERASYS International
serban () verasys ro
zamolxe () php net
http://www.verasys.ro
phone1: +40-251-406.152
phone2: +40-251-406.153
cell: +40-788.28.29.10

----- Original Message ----- 
From: "Andi McLean" <andi_mclean () ntlworld com>
To: <webappsec () securityfocus com>
Sent: Sunday, November 28, 2004 3:21 PM
Subject: Fwd: PHP Easter Eggs


Hi,

Does anyone know about the easter eggs in PHP?
I've just found out about them, My trust in PHP has just had a major set
back,
as I'm wondering what other easter eggs there are and can any be used to
circumenvent the protection I have on my site.
I feel like I now need to have a look at the source code, to find out what
else is there.

<anywebsite.that/uses.php>?=PHPE9568F36-D428-11d2-A769-00AA001ACF42

<anywebsite.thatuses.php>?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000

<anywebsite.thatuses.php>?=PHPE9568F34-D428-11d2-A769-00AA001ACF42

eg
www.jsane.com/index.php?=PHPE9568F36-D428-11d2-A769-00AA001ACF42
www.jsane.com/index.php?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000
www.jsane.com/index.php?=PHPE9568F34-D428-11d2-A769-00AA001ACF42


Andi


Current thread: