Re: function sleep() in all versions of PHP

From: <cxib_at_securityreason.com>
Date: 27 May 2008 10:44:00 -0000

('binary' encoding is not supported, stored as-is) Yeap.

„Using PHP as an in-process script interpreter grants script authors control over the httpd children.”

It is possible to make DoS (block all sockets/memory exe.). (more in Xploit magazin)
Reason: Use PHP via a CGI interpreter with RLimit* directives.
Anyone how use PHP as an in-process script interpreter, can be dangerous.

Best Regards,
Maksymilian Arciemowicz
securityreason.com
http://securityreason.com/key/Arciemowicz.Maksymilian.gpg
Received on May 27 2008