#9767 [Com]: Can set environment variables in the query string.

ID: 9767 Comment by: nones at nddo dot com Reported By: toastyghost_ at hotmail dot com Status: Bogus Bug Type: Feature/Change Request Operating System: Red Hat PHP Version: 4.0.4pl1 New Comment: http://www.1st-art-gallery.com/home_gallery.htm <A HREF="http://www.1st-art-gallery.com/home_gallery.htm">Oil Paintings </A></FONT></SPAN><FONT SIZE="2"> main page<BR> Previous Comments: ------------------------------------------------------------------------ [2001-03-15 10:49:32] cynic@php.net this is configurable from php.ini, and described in there: variables_order = "EGPCS" ; This directive describes the order in which PHP registers ; GET, POST, Cookie, Environment and Built-in variables (G, P, ; C, E & S respectively, often referred to as EGPCS or GPC). ; Registration is done from left to right, newer values override ; older values. Also, consider turning register_globals off. ------------------------------------------------------------------------ [2001-03-15 10:09:27] toastyghost_ at hotmail dot com /* this is a security measure that only permits the display of the page if the referer is within the same domain as the page... if you run it with HTTP_REFERER=HTTP_HOST or a string of the host url in the query string or post a form input object called HTTP_REFERER with value of host url, it produces the same effect as if you had clicked on a link from within the site */ <? $referer = parse_url($HTTP_REFERER); if($referer[host]!='mydomain.com') die ('invalid host'); else{echo '<html>this is my page!!</html>'; ?> ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=9767&edit=1