Re: Legacy PHP script
"Borwick, James Bryce" <[email protected]> Sat, 31 Jan 2015 18:28:59 +0000
| Newsgroups | gmane.comp.php.drupal.support |
|---|---|
| Message-ID | <9853A9E4847B934B918DD8D1D8036AFD97562184@UM-MBX-T01.um.umsystem.edu> |
--===============1998459955418177588== Content-Language: en-US Content-Type: multipart/alternative; boundary="_000_9853A9E4847B934B918DD8D1D8036AFD97562184UMMBXT01umumsys_" --_000_9853A9E4847B934B918DD8D1D8036AFD97562184UMMBXT01umumsys_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable File permissions? Are there directives preventing Apache from executing php scripts in certai= n directories or limiting the directories in which php scripts executed? ________________________________ From: [email protected] [[email protected]] on behalf of = Chris Miller [[email protected]] Sent: Saturday, January 31, 2015 11:23 AM To: [email protected] Subject: [support] Legacy PHP script Hi Folks, I have a legacy php script that displays a form, accepts input and posts ba= ck to itself, where it looks for a non-zero $_POST array to decide if it is= processing or displaying. In the event of process, it updates a database a= nd redirects to a thank-you page. Simple. I put this script in /site/default/files/form.php and I href'd it to a pict= ure. When I click the picture, I get the text of form.php, not the result o= f processing. I have discovered that if I put the form on a different websi= te, then I do get execution, so apparently Drupal is able to suppress php e= xecution within its URL space. How do I bypass anti-execution restriction f= or this legacy script? Or, how do I incorporate this legacy script into an = existing Drupal site? Thanks for the help, Chris. --_000_9853A9E4847B934B918DD8D1D8036AFD97562184UMMBXT01umumsys_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <html dir=3D"ltr"> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-= 1"> <style type=3D"text/css" id=3D"owaParaStyle"></style> </head> <body fpstyle=3D"1" ocsi=3D"0"> <div style=3D"direction: ltr;font-family: Tahoma;color: #000000;font-size: = 10pt;"> <div>File permissions?</div> <div><br> </div> <div>Are there directives preventing Apache from executing php scripts in c= ertain directories or limiting the directories in which php scripts execute= d?</div> <div><br> </div> <div> <br> <div style=3D"font-family: Times New Roman; color: #000000; font-size: 16px= "> <hr tabindex=3D"-1"> <div id=3D"divRpF332795" style=3D"direction: ltr;"><font face=3D"Tahoma" si= ze=3D"2" color=3D"#000000"><b>From:</b> [email protected] [support= [email protected]] on behalf of Chris Miller [[email protected]]<br> <b>Sent:</b> Saturday, January 31, 2015 11:23 AM<br> <b>To:</b> [email protected]<br> <b>Subject:</b> [support] Legacy PHP script<br> </font><br> </div> <div></div> <div> <div style=3D"font-family:arial,helvetica,sans-serif; font-size:10pt; color= :#000000"> <div>Hi Folks,<br> </div> <div><br> </div> <div>I have a legacy php script that displays a form, accepts input and pos= ts back to itself, where it looks for a non-zero $_POST array to decide if = it is processing or displaying. In the event of process, it updates a datab= ase and redirects to a thank-you page. Simple.<br> </div> <div><br> </div> <div>I put this script in /site/default/files/form.php and I href'd it to a= picture. When I click the picture, I get the text of form.php, not the res= ult of processing. I have discovered that if I put the form on a different = website, then I do get execution, so apparently Drupal is able to suppress php execution within its URL spac= e. How do I bypass anti-execution restriction for this legacy script? Or, h= ow do I incorporate this legacy script into an existing Drupal site?<br> </div> <div><br> </div> <div>Thanks for the help,</div> <div><br> </div> <div><span name=3D"x"></span> <div><span style=3D"font-family:comic sans ms,comic sans,sans-serif">Chris.= </span><br> </div> </div> </div> </div> </div> </div> </div> </body> </html> --_000_9853A9E4847B934B918DD8D1D8036AFD97562184UMMBXT01umumsys_-- --===============1998459955418177588== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline -- [ Drupal support list | http://lists.drupal.org/ ] --===============1998459955418177588==--