RE: [PHP] Is this possible?
| From: | Jay Blanchard | Date: | Wed, 11 Jun 2003 15:14:47 +0000 |
| Subject: | RE: [PHP] Is this possible? | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-151087@lists.php.net to get a copy of this message | ||
[snip]
Please read these pages:
http://de.php.net/release_4_1_0.php
http://de.php.net/manual/en/security.registerglobals.php
if your PHP setting called register_globals is turned on, then the code
you
propose would allow hackers to ask anything they want to your database,
including destructive options.
[/snip]
UNLESS you declare and check your variables!