#19412 [Fbk->Bgs]: Users can change $_SERVER Vars

ID: 19412 Updated by: derick@php.net Reported By: sven@darkman.de -Status: Feedback +Status: Bogus Bug Type: Feature/Change Request Operating System: Linux PHP Version: 4.2.3 New Comment: Thank you for taking the time to write to us, but this is not a bug. Please double-check the documentation available at http://www.php.net/manual/ and the instructions on how to report a bug at http://bugs.php.net/how-to-report.php The $_server array is just filled at start up, you can do whatever you want with it in your script. Of course this will never modify the 'real' server variables and they will be reset in a request for a new script. Derick Previous Comments: ------------------------------------------------------------------------ [2002-09-15 02:31:00] mfischer@php.net Please provide an example what you mean exactly. ------------------------------------------------------------------------ [2002-09-15 00:01:38] sven@darkman.de I found that users may change Vars in the $_SERVER (and all other arrays used by PHP). I don't think that a User should be able to change such Variables. Comments? ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=19412&edit=1