Re: PHP on domain...

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




----- Original Message ----- From: "Steve Edberg" <sbedberg@xxxxxxxxxxx> To: "Gustav Wiberg" <gustav@xxxxxxxxxxxxxx>; "PHP General" <php-general@xxxxxxxxxxxxx>
Sent: Sunday, January 29, 2006 10:51 PM
Subject: Re:  PHP on domain...


At 10:08 PM +0100 1/29/06, Gustav Wiberg wrote:
Hi guys!

How can you check if a domain (that you don't own), can run PHP-code?

Is it possible?
/G
@varupiraten.se


Answer 1:

Call them, fax them, email them, IM them, or check their website. This is the only way to know for sure.

Answer 2:

Check http://netcraft.com/

I don't know all the tools they use to record server information, but I presume that it includes methods like Answer 3 below.

Answer 3:

If you want to do this via a program, the answer is - in general, no. However, many servers will return an HTTP header containing this info. Also, (at least on Apache) server signatures may be set to reveal this info on error displays. You could open a socket connection to port 80 of the desired domain, and issue a HEAD request. You'll have to parse the results for Server and/or X-Powered-By and possibly other headers. Here's some examples via telnet:

telnet <domain deleted> 80
Trying <ip address deleted>...
Connected to <domain deleted>.
Escape character is '^]'.
HEAD / HTTP/1.0

HTTP/1.0 200 OK
Date: Sun, 29 Jan 2006 21:23:03 GMT
Server: Apache
Content-Type: text/html
Connection: close



telnet <domain deleted> 80
Trying <ip address deleted>...
Connected to <domain deleted>.
Escape character is '^]'.
HEAD / HTTP/1.0

HTTP/1.1 403 Access Forbidden
Server: Microsoft-IIS/5.0
Date: Sun, 29 Jan 2006 21:32:26 GMT
Content-Length: 4126
Content-Type: text/html



telnet <domain deleted> 80
Trying <ip address deleted>...
Connected to <domain deleted>.
Escape character is '^]'.
HEAD / HTTP/1.0

HTTP/1.0 302 Moved Temporarily
Date: Sun, 29 Jan 2006 21:36:52 GMT
Server: Apache/1.3.33 (Unix) PHP/4.3.10 mod_ssl/2.8.22 OpenSSL/0.9.7e
X-Powered-By: PHP/4.3.10
Location: index_html.html
Content-Type: text/html
Connection: close



However, many servers are set to not reveal this info for security purposes; it could also be spoofed for the same reason. For example, the second site above (the IIS one) actually *does* support PHP according to their website. See

http://www.php.net/manual/en/ref.sockets.php

for info on opening & reading from sockets; there is an example on this page in the user comments about sending HTTP HEAD requests.

steve

--
+--------------- my people are the people of the dessert, ---------------+
| Steve Edberg                                http://pgfsun.ucdavis.edu/ |
| UC Davis Genome Center                            sbedberg@xxxxxxxxxxx |
| Bioinformatics programming/database/sysadmin             (530)754-9127 |
+---------------- said t e lawrence, picking up his fork ----------------+

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Hi there!

Thanx for info!

/G

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux