RE: [PHP] Re: Using register_globals
| From: | Jay Blanchard | Date: | Wed, 04 Jun 2003 16:12:02 +0000 |
| Subject: | RE: [PHP] Re: Using register_globals | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-150204@lists.php.net to get a copy of this message | ||
[snip]
Have register globals set to ON is one way of leaving your script open
to being exploitable.
[/snip]
Please explain this, how does it make it more exploitable? I think that
this is only true if the code is sloppy.
Thanks!
Jay