PHP code is displayed in user's browser

Question

I have a php script like this :

<?php
$confirmationCode = trim($_GET['confcode']);
$_SERVER['REMOTE_ADDR'] = 'xxx.xxx.xxx.xxx';
$emailLogId = 1;
if ($_SERVER['REMOTE_ADDR']=='xxx.xxx.xxx.xxx') {
//   print '<pre>' .'xxxxx' . $emailLogId . '###';  //exit ;    
}
if( is_numeric($emailLogId)) {
if ($_SERVER['REMOTE_ADDR']=='xxx.xxx.xxx.xxx') {
// print '<pre>yyy' . $_GET['emaillog_id'] . 'yyyxxxxxx ' . $emailLogId;  print_r             ($row) ; exit ;   
}
//$osDB->query('UPDATE ! SET clicktime=? WHERE id=?', array('email_logs', time(),   $emailLogId));
} else {
if ($_SERVER['REMOTE_ADDR']=='xxx.xxx.xxx.xxx') {
//   print '<pre>zzz' . $_GET['emaillog_id'] . 'yyyxxxxxx ' . $emailLogId;  print_r ($row) ; exit ;     
}
}
?>

It is running on my server. Actually some people are complaining that they are seeing the source code of this script( pasted below ) on their browser and they send me snap shot of this issue:

 ' .'xxxxx' . $emailLogId . '###';  //exit ;    
}
 if( is_numeric($emailLogId)) {
 if ($_SERVER['REMOTE_ADDR']=='xxx.xxx.xxx.xxx') {
// print '<pre>yyy' . $_GET['emaillog_id'] . 'yyyxxxxxx ' . $emailLogId;  print_r ($row) ; exit ;   
}
//$osDB->query('UPDATE ! SET clicktime=? WHERE id=?', array('email_logs', time(), $emailLogId));
 } else {
if ($_SERVER['REMOTE_ADDR']=='xxx.xxx.xxx.xxx') {
 //  print '<pre>zzz' . $_GET['emaillog_id'] . 'yyyxxxxxx ' . $emailLogId;  print_r ($row) ; exit ;     
}
 }
?>

Actually I am really confused because I am not able to reproduce this problem, but 3-4 people are complaining about same the thing.

Do you have any idea what is the issue?

@Tim, those guy doesnt need PHP running in their machine. Their browser is just outputing the php code Its likely your apache is behaving weirdly, sometimes it parses php and sometimes it doesnot. Check with the hosting server, contact them if there is any misconfiguration in apache — WatsMyName
– WatsMyName, Commented Aug 27, 2012 at 6:37

Keval Domadia · Accepted Answer · 2012-08-27 08:19:07Z

2

Yes, similar thing happened with me too.

2 things:

. Apache configuration.

Make sure php engine is ON. If you cannot access your apache configuration file then, add this in your .htaccess:

php_flag engine on

. CDN.

If you are using any Cloud Distribution Network, it is time for you to ask them to purge your existing cache and re-load the new one.

Browser will display PHP source code ONLY AND ONLY if apache configuration is going wrong.

Hope that helps.

EDIT:

After reading Sabin's comment, I gave a second look at the code.

Problem is, he has ASSIGNED the value to $_SERVER['REMOTE_ADDR'] (line 3)

Here is how it should be:

<?php
$confirmationCode = trim($_GET['confcode']);
$ip = 'xxx.xxx.xxx.xxx';
$emailLogId = 1;

//Whatever conditions.
if ($_SERVER['REMOTE_ADDR'] == 'xxx.xxx.xxx.xxx') {
//   print '<pre>' .'xxxxx' . $emailLogId . '###';  exit ;    
}
if( is_numeric($emailLogId)) {
if ($_SERVER['REMOTE_ADDR'] == 'xxx.xxx.xxx.xxx') {
// print '<pre>yyy' . $_GET['emaillog_id'] . 'yyyxxxxxx ' . $emailLogId;  print_r             ($row) ; exit ;   
}
//$osDB->query('UPDATE ! SET clicktime=? WHERE id=?', array('email_logs', time(),   $emailLogId));
} else {
if ($_SERVER['REMOTE_ADDR']=='xxx.xxx.xxx.xxx') {
//   print '<pre>zzz' . $_GET['emaillog_id'] . 'yyyxxxxxx ' . $emailLogId;  print_r ($row) ; exit ;     
}
}
?>

However, echo-ing the source code cannot be due to this. I would ask you to put FULL FILE so that we could see if you are missing a closing single quote!

edited Aug 27, 2012 at 8:19

answered Aug 27, 2012 at 6:35

Keval Domadia

4,7631 gold badge39 silver badges65 bronze badges

Sign up to request clarification or add additional context in comments.

9 Comments

Clyde Lobo Over a year ago

Exactly my thought. Seems more of an configuration issue. Also the OP must be testing on his machine which is already setup and hence he does not get the error!!

Keval Domadia Over a year ago

+1 The same happened with me 2 years ago. Trust me, it was a nightmare at that time!

WatsMyName Over a year ago

but one question is here, THe apache parses first 5 line correctly, the php code is outputted only right after <pre> tag is used in comment. It should have outputted whole code right from <? if its apache misconfiguration

Clyde Lobo Over a year ago

@Sabin : Have you tried it at your end. May be the users are giving you just a piece of the code that gets displayed

WatsMyName Over a year ago

@ClydeLobo, I m not getting error in my end. I dont know how his users got it. And I m still wondering if its Apache misconfiguration in his server, then why all of the code is not showing in browser [As The post owner pasted the code that is being outputted in the browser, which starts write after <pre>], and its no way browser parses the comments.

|

Community · Accepted Answer · 2017-05-23 12:04:46Z

1

It sounds like PHP is not working at all. The only reason you are not seeing the first part, is because your browsers is parsing it as if it were an HTML tag.

And Please try to print phpinfo() once,

please check for the below link, for more details

PHP code displayed in browser

edited May 23, 2017 at 12:04

CommunityBot

11 silver badge

answered Aug 27, 2012 at 6:53

Nishant

3,7141 gold badge22 silver badges26 bronze badges

Collectives™ on Stack Overflow

PHP code is displayed in user's browser

2 Answers 2

9 Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

9 Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related