News Feed
Sections




News Archive
Looking for more information on how to do PHP the right way? Check out PHP: The Right Way

Community News:
Facebook PHP Source Leaked
August 13, 2007 @ 07:56:00

As many people noted in the past few days, there was a code leak over on Facebook.com. Some of the PHP code that runs the website was exposed as plain text to viewers. Unfortunately, several people are blaming PHP as the source of the issue including Nik Cubrilovic, a writer for TechCrunch:

I just posted on TC about the Facebook code leak. PHP has always been notorious for sometimes not processing requests poorly and sending back the source code for pages to the client. Because of the way mod_php works with apache, if mod_php fails in intercepting and processing the request, then apache will just serve it back to the client as an ordinary text file.

Of course, the PHP community is speaking back to the allegations including Clay Loveless in a new blog entry on his site:

I agree with Cubrilovic that the inadvertent delivery of source code instead of the result of that source code is certainly a horrific situation, with potentially serious ramifications for any company that experiences such a problem on a large scale basis. [...] Unfortunately, the updates appended to the article imply that PHP is somehow responsible for this leakage.

He supports some of the issues (a server misconfiguration could cause odd behavior) but refutes others (the "known issue" of PHP pushing out source code under high load).

0 comments voice your opinion now!
facebook source leak server misconfigure facebook source leak server misconfigure


blog comments powered by Disqus

Similar Posts

PHPBuilder.com: AJAX and PHP Part 2 - XML Communication/Processing

Greg Beaver's Blog: Chiara_PEAR_Server 0.18.7 released - a must-upgrade!

Daniel Krook's Blog: Zend and IBM update PHP for i5/OS

PHPEverywhere: New Improved Yummy ADOdb Session Handler

Stefan Esser's Blog: Suhosin 0.9.21 - XSS Protection


Community Events





Don't see your event here?
Let us know!


release laravel package interview language introduction series tool composer community library podcast update mvc security framework voicesoftheelephpant symfony version opinion

All content copyright, 2014 PHPDeveloper.org :: info@phpdeveloper.org - Powered by the Solar PHP Framework