Comment by cowlevel
6 hours ago
What specific configuration would you recommend to block the vulnerability without actually patching it?
6 hours ago
What specific configuration would you recommend to block the vulnerability without actually patching it?
None. Like I wrote "I don't know, I hope my provider patched it properly."
Then why did you say
> you can prevent PHP being executed on malicious data by configuring the webserver.
You can do this. I don't know how, and I don't think it's a feasible use of my time, to find out how. It's obviously computable on a Turing machine, because they were able to patch PHP.
4 replies →
Configure your webserver to not execute PHP code.