Comment

Comment by jstanley

The exploit requires

> fastcgi_split_path_info ^(.+?\.php)(/.*)$;

If I'm not using this feature of PHP, what can I put in this config value to prevent the exploit from working?

parent jstanley 7 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton