Bug#169591: marked as done (www.debian.org: qa.d.o/developer.php downloads script source)
Your message dated 18 Nov 2002 11:44:28 +0000
with message-id <873cpzrtk3.fsf@nocrew.org>
and subject line Bug#169583: nm.debian.org broken
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 18 Nov 2002 09:02:05 +0000
>From angdraug@mail.belcaf.minsk.by Mon Nov 18 03:02:04 2002
Return-path: <angdraug@mail.belcaf.minsk.by>
Received: from mail.belcaf.minsk.by [217.21.35.41]
by master.debian.org with esmtp (Exim 3.12 1 (Debian))
id 18Dhn8-0003X2-00; Mon, 18 Nov 2002 03:02:03 -0600
Received: from pc113 ([192.168.111.130]) by mail.belcaf.minsk.by
(MTA 4.15) with ESMTP id H5RKZ500.0A3; Mon, 18 Nov 2002 10:59:29 +0200
Received: from angdraug by pc113 with local (Exim 3.36 #1 (Debian))
id 18Dhkk-0001Nx-00; Mon, 18 Nov 2002 10:59:12 +0200
Date: Mon, 18 Nov 2002 10:59:12 +0200
From: Dmitry Borodaenko <d.borodaenko@sam-solutions.net>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: www.debian.org: qa.d.o/developer.php downloads script source
Message-ID: <[🔎] 20021118085912.GA5276@sam-solutions.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.4i
X-Reportbug-Version: 1.50
Sender: Dmitry Borodaenko <angdraug@localhost>
Delivered-To: submit@bugs.debian.org
X-Spam-Status: No, hits=-7.2 required=5.0
tests=SIGNATURE_SHORT_DENSE,SPAM_PHRASE_00_01,USER_AGENT,
USER_AGENT_MUTT
version=2.41
X-Spam-Level:
Package: www.debian.org
Version: N/A; reported 2002-11-18
Severity: important
It looks like PHP has gone south and now, when accessing
http://qa.debian.org/developer.php
from Mozilla, developer.php script is not executed on server side, but
is downloaded instead. I am not sure it poses a security threat (script
source exposure is dangerous, but this partucular script doesn't handle
user auth), but it definitely makes the script unusable.
--
Dmitry Borodaenko
---------------------------------------
Received: (at 169583-done) by bugs.debian.org; 18 Nov 2002 11:44:38 +0000
>From james@ruari-quinn.demon.co.uk Mon Nov 18 05:44:37 2002
Return-path: <james@ruari-quinn.demon.co.uk>
Received: from mta03-svc.ntlworld.com [62.253.162.43]
by master.debian.org with esmtp (Exim 3.12 1 (Debian))
id 18DkKS-0004CA-00; Mon, 18 Nov 2002 05:44:37 -0600
Received: from tacitus ([80.7.68.64]) by mta03-svc.ntlworld.com
(InterMail vM.4.01.03.27 201-229-121-127-20010626) with ESMTP
id <20021118114433.BFA27923.mta03-svc.ntlworld.com@tacitus>
for <169583-done@bugs.debian.org>;
Mon, 18 Nov 2002 11:44:33 +0000
Received: from james by tacitus with local (Exim 3.35 #1 (Debian))
id 18DkKL-0000T4-00
for <169583-done@bugs.debian.org>; Mon, 18 Nov 2002 11:44:29 +0000
To: 169583-done@bugs.debian.org
Subject: Re: Bug#169583: nm.debian.org broken
References: <[🔎] 20021118073253.GC1446@localhost>
Mail-Copies-To: never
From: James Troup <james@nocrew.org>
Date: 18 Nov 2002 11:44:28 +0000
In-Reply-To: <[🔎] 20021118073253.GC1446@localhost>
Message-ID: <873cpzrtk3.fsf@nocrew.org>
Lines: 13
User-Agent: Gnus/5.0808 (Gnus v5.8.8) Emacs/20.7
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Sender: James Troup <james@ruari-quinn.demon.co.uk>
Delivered-To: 169583-done@bugs.debian.org
X-Spam-Status: No, hits=-12.7 required=5.0
tests=EMAIL_ATTRIBUTION,IN_REP_TO,QUOTED_EMAIL_TEXT,REFERENCES,
SIGNATURE_SHORT_DENSE,SPAM_PHRASE_00_01,USER_AGENT
version=2.41
X-Spam-Level:
Ralf Treinen <treinen@club-internet.fr> writes:
> Package: www.debian.org
> Version: as of 2002-11-18, 7:30 UTC
> Severity: Important
>
> nm.debian.org seems to be broken. The reponse sent by him contains bits
> of php code.
fixed
--
James
Reply to: