Bug #10519: $HTTP_COOKIE_VARS spoofing
| From: | stuff at cheesygames dot net | Date: | Fri, 27 Apr 2001 01:35:49 +0000 |
| Subject: | Bug #10519: $HTTP_COOKIE_VARS spoofing | ||
| Groups: | php.dev | ||
| Request: | Send a blank email to php-dev+get-52556@lists.php.net to get a copy of this message | ||
From: stuff@cheesygames.net
Operating system: Win98
PHP version: 4.0.4pl1
PHP Bug Type: Variables related
Bug description: $HTTP_COOKIE_VARS spoofing
<?
setCookie('cookie[one]','one');
setCookie('cookie[two]','two');
print_r($HTTP_COOKIE_VARS);
?>
If you access this page with the command line arguement
?cookie[three]=three
print_r will show cookie[three] in $HTTP_COOKIE_VARS.
Just a bit of incongrous material, but for some sites could cause problems if cookies are spoofed
thusly.
Regards
--
Edit Bug report at: http://bugs.php.net/?id=10519&edit=1