Create PHP file in Drupal files directory and attempt to execute

CommentFileSizeAuthor
#2 2006438-security-review.patch3.23 KBcoltrane
#1 2006438-security-review.patch3.7 KBcoltrane

Comments

coltrane’s picture

coltrane
he/him
commented
Status: Active » Needs review
StatusFileSize
new 2006438-security-review.patch3.7 KB

Need to write up something on d.o about the specifics of .htaccess protection and how to recreate. But this test works on my local D7 site on apache with php 5.3

coltrane’s picture

coltrane
he/him
commented
StatusFileSize
new 2006438-security-review.patch3.23 KB

Updated patch with link to https://drupal.org/node/615888

coltrane’s picture

coltrane
he/him
commented
Status: Needs review » Fixed

http://drupalcode.org/project/security_review.git/commit/107b012

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.