Re: Change User on a pconnect
| From: | Rasmus Lerdorf | Date: | Thu, 01 Jan 1970 00:00:00 +0000 |
| Subject: | Re: Change User on a pconnect | ||
| References: | 1 | Groups: | php.dev |
| Request: | Send a blank email to php-dev+get-12205@lists.php.net to get a copy of this message | ||
> On Sat, Nov 06, 1999 at 12:02:14PM -0500, Rasmus Lerdorf wrote:
>
> > Yeah, I was only looking at PHP 3 code where the thing is just an
> > integer. I'd like to verify/fix this before 3.0.13 and will get right on
> > it after lunch here.
>
> Umm... this is news that it is a security hole?
It turned out that it wasn't. I was just musing, when I sat down and
actually went through it, it was clear that there was no way to get hijack
a persistent connection without authenticating on it.
-Rasmus