#23001 [Fbk]: Bug in documentation of SESSIONs
| From: | sesser@php.net | Date: | Wed, 02 Apr 2003 09:35:35 +0000 |
| Subject: | #23001 [Fbk]: Bug in documentation of SESSIONs | ||
| References: | 1 | Groups: | php.doc |
| Request: | Send a blank email to phpdoc+get-969352441@lists.php.net to get a copy of this message | ||
ID: 23001
Updated by: sesser@php.net
Reported By: sesser@php.net
Status: Feedback
Bug Type: Documentation problem
Operating System: *
PHP Version: 5CVS-2003-04-01 (dev)
New Comment:
Do whatever you like strip_tags(),urlencode(),html_entities()
just replace the simple echo SID stuff.
Previous Comments:
------------------------------------------------------------------------
[2003-04-01 17:14:32] alindeman@php.net
What do you suggest be done with it?
------------------------------------------------------------------------
[2003-04-01 05:52:04] sesser@php.net
Documentation suggest to output SID with a simple
echo -> vulnerable to Cross Site Scripting
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=23001&edit=1