and so... there is a security problem.
| From: | Vergoz Michael \(SYSDOOR\) | Date: | Thu, 19 Sep 2002 10:38:21 +0000 |
| Subject: | and so... there is a security problem. | ||
| Groups: | php.dev | ||
| Request: | Send a blank email to php-dev+get-88434@lists.php.net to get a copy of this message | ||
Hi list,
i think that you have to return a _s64 per default, cuz for exemple i'm using some
identification coded on _s64 if i jump 21 474 836 47, intval() will return to me a wrong number
(normal) but i _can't_ know if that that number is a valid _s64 (_s64) and there can have some
big security problems
Exemple:
$id = intval($_GET['id']);
$query = "
SELECT
\"proute\"
FORM
\"polom\"
WHERE
id = $id
";
Best regards,
Vergoz Michael
SYSDOOR