ID:               19113
 User updated by:  [EMAIL PROTECTED]
 Reported By:      [EMAIL PROTECTED]
 Status:           Open
 Bug Type:         Apache related
 Operating System: FreeBSD 4.6.2
 PHP Version:      4.2.2
 New Comment:

Yes; [EMAIL PROTECTED] is correct.  My previous comment ("bug possibly
fixed") was in haste.

The problem still exists in 4.3.0.  Please, someone in the PHP crew
investigate this fully, as it's becoming more and more of an issue and
seems to be affecting essentially everyone who uses PHP and Apache.


Previous Comments:
------------------------------------------------------------------------

[2003-01-03 23:39:16] [EMAIL PROTECTED]

Problem still exists in PHP 4.3.0, i'm running Apache 1.3.27 on
FreeBSD.

------------------------------------------------------------------------

[2003-01-02 06:32:47] [EMAIL PROTECTED]

I apologise for not being able to test 4.3.0 or any of the "snap"
releases prior to now -- we use FreeBSD, and we rely on the FreeBSD
port of mod_php4.  The port author has not upgraded to 4.3.0 yet, and
therefore we were stuck using 4.2.3 until earlier this evening when I
removed the port and went with the old method of installing off source
manually.

It seems that this problem may in fact be fixed in 4.3.0.  The problem
documented no longer appears.

------------------------------------------------------------------------

[2002-12-28 01:00:02] [EMAIL PROTECTED]

No feedback was provided for this bug for over 2 weeks, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".

------------------------------------------------------------------------

[2002-12-18 07:09:42] [EMAIL PROTECTED]

Sorry, you don't understand the problem.

The problem is that apache returns "HTTP 200 OK" on CONNECT request,
but does NOT really connect to specified addrress. If it is possible to
connect through your server to outside, then it's problem of your
misconfigured proxy.

------------------------------------------------------------------------

[2002-12-16 13:54:03] [EMAIL PROTECTED]

This bug is VERY serious.  Our web servers have be attacked and used
for relaying SPAM.  Spammers are using the CONNECT command to proxy to
open relay servers masking their IP addresses with ours.

------------------------------------------------------------------------

The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
    http://bugs.php.net/19113

-- 
Edit this bug report at http://bugs.php.net/?id=19113&edit=1

Reply via email to