Re: and so... there is a security problem.
| From: | derick@php.net | Date: | Thu, 19 Sep 2002 10:48:00 +0000 |
| Subject: | Re: and so... there is a security problem. | ||
| References: | 1 | Groups: | php.dev |
| Request: | Send a blank email to php-dev+get-88435@lists.php.net to get a copy of this message | ||
Hey,
this is the wrong list for these kinds of questions, try the
php-general@lists.php.net mailinglist instead.
Derick
On Thu, 19 Sep 2002, Vergoz Michael (SYSDOOR) wrote:
> Hi list,
>
> i think that you have to return a _s64 per default, cuz for exemple i'm using some
> identification coded on _s64 if i jump 21 474 836 47, intval() will return to me a wrong number
> (normal) but i _can't_ know if that that number is a valid _s64 (_s64) and there can have some
> big security problems
>
> Exemple:
>
> $id = intval($_GET['id']);
> $query = "
> SELECT
> \"proute\"
> FORM
> \"polom\"
> WHERE
> id = $id
> ";
>
> Best regards,
> Vergoz Michael
> SYSDOOR
>
---------------------------------------------------------------------------
Derick Rethans http://derickrethans.nl/
JDI Media Solutions
-----------------------------[ zak@mysql.com: Databases are for Assholes ]-