Re: and so... there is a security problem.
| From: | Vergoz Michael \(SYSDOOR\) | Date: | Thu, 19 Sep 2002 10:47:50 +0000 |
| Subject: | Re: and so... there is a security problem. | ||
| References: | 1 2 | Groups: | php.dev |
| Request: | Send a blank email to php-dev+get-88436@lists.php.net to get a copy of this message | ||
Only that you have to explain me ?
goto to another list ..
pff
----- Original Message -----
From: <derick@php.net>
To: "Vergoz Michael (SYSDOOR)" <mvergoz@sysdoor.com>
Cc: <php-dev@lists.php.net>
Sent: Thursday, September 19, 2002 12:48 PM
Subject: Re: [PHP-DEV] and so... there is a security problem.
> Hey,
>
> this is the wrong list for these kinds of questions, try the
> php-general@lists.php.net mailinglist instead.
>
> Derick
>
> On Thu, 19 Sep 2002, Vergoz Michael (SYSDOOR) wrote:
>
> > Hi list,
> >
> > i think that you have to return a _s64 per default, cuz for exemple i'm
using some identification coded on _s64 if i jump 21 474 836 47, intval()
will return to me a wrong number (normal) but i _can't_ know if that that
number is a valid _s64 (_s64) and there can have some big security problems
> >
> > Exemple:
> >
> > $id = intval($_GET['id']);
> > $query = "
> > SELECT
> > \"proute\"
> > FORM
> > \"polom\"
> > WHERE
> > id = $id
> > ";
> >
> > Best regards,
> > Vergoz Michael
> > SYSDOOR
> >
>
> --------------------------------------------------------------------------
-
> Derick Rethans
> http://derickrethans.nl/
> JDI Media Solutions
> -----------------------------[ zak@mysql.com: Databases are for
Assholes ]-
>
>
> --
> PHP Development Mailing List <http://www.php.net/>
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>