<<< Date Index >>>     <<< Thread Index >>>

Re: PHP ip2long() function circumvention



I think you should have reported this as a MiniBB vulnerability (and I'm 
assuming you have).
I don't know if I would really classify this as an issue with the PHP function, 
though it may require looking into. I recently discovered similar behavior in 
Windows resolving applications. I can't be certain that the Windows resolver 
itself is the culprit, as I haven't tested (maybe one of you would like to do 
so), but when using the "/dns" command in mIRC, a tab and other special 
characters as an argument (preceding valid input data) seems to return the 
local host name.
I'm not sure whether that's expected behavior, but it's very similar to this, 
only less relevant to the security of a particular application.