#19412 [NEW]: Users can change $_SERVER Vars
| From: | sven at darkman dot de | Date: | Sun, 15 Sep 2002 05:01:38 +0000 |
| Subject: | #19412 [NEW]: Users can change $_SERVER Vars | ||
| Groups: | php.bugs | ||
| Request: | Send a blank email to php-bugs+get-19376@lists.php.net to get a copy of this message | ||
From: sven@darkman.de
Operating system: Linux
PHP version: 4.2.3
PHP Bug Type: Feature/Change Request
Bug description: Users can change $_SERVER Vars
I found that users may change Vars in the $_SERVER (and all
other arrays used by PHP). I don't think that a User should
be able to change such Variables. Comments?
--
Edit bug report at http://bugs.php.net/?id=19412&edit=1
--
Try a CVS snapshot: http://bugs.php.net/fix.php?id=19412&r=trysnapshot
Fixed in CVS: http://bugs.php.net/fix.php?id=19412&r=fixedcvs
Fixed in release: http://bugs.php.net/fix.php?id=19412&r=alreadyfixed
Need backtrace: http://bugs.php.net/fix.php?id=19412&r=needtrace
Try newer version: http://bugs.php.net/fix.php?id=19412&r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=19412&r=support
Expected behavior: http://bugs.php.net/fix.php?id=19412&r=notwrong
Not enough info: http://bugs.php.net/fix.php?id=19412&r=notenoughinfo
Submitted twice: http://bugs.php.net/fix.php?id=19412&r=submittedtwice
register_globals: http://bugs.php.net/fix.php?id=19412&r=globals