3 ms·

http://enekoalonso.com/terminal.php?command=ls&path=../../../../../../../../../../../../etc/ http://enekoalonso.com/terminal.php?command=ls&path=../.... Securi

by ameketa 16y ago

http://enekoalonso.com/terminal.php?command=ls&path=../../../../../../../../../../../../etc/ http://enekoalonso.com/terminal.php?command=ls&path=../.... Security fail.

rwolf 16y ago
glad to see HN is enjoying yesterday's release of mod_pagespeed: http://enekoalonso.com/terminal.php?command=ls&path=../../../../../../../../../../../../var http://enekoalonso.com/terminal.php?command=ls&path=../....
- andfarm 16y ago
  We (DreamHost) don't have mod_pagespeed support out quite yet, but the feature should be available to our customers by the end of the day today, as soon as I flip the switch to turn it on. :)
llimllib 16y ago
That's a remarkably terrible way to implement a terminal.
- eneko 16y ago
  It was never my intent to implement a terminal. The site does not execute any system commands at all on the server side. Pretty much, all commands are 'custom' or invented, to show stuff about me and stuff I've worked on (a long, long time ago). Nothing else.
eneko 16y ago
Nice. The code was already checking for '..' on the path, but the condition was erroneous. Fixed now.
- toolate 16y ago
  You might be better off getting the canonical path and then checking against a whitelist. E.g. `strpos(realpath($command_path), '/var/www/html/') === 0`.