Re: Wierd ass code...
| From: | Ryan A | Date: | Tue, 16 May 2006 00:56:58 +0000 |
| Subject: | Re: Wierd ass code... | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-236252@lists.php.net to get a copy of this message | ||
Hey Rich,
> > // Add to the running totals
> > @$hits["$username|$subnet"]++;
> > @$bytes["$username|$subnet"]+=$byte;
> > @$baps["$username|$subnet|$this_second"]++;
> > @$bapm["$username|$subnet|$this_minute"]++;
>
> @ is suppressing the E_NOTICE error message that the
> variables are not
> pre-set.
Yep, I got that.
> This is BAD if register_globals is ON as it means
> that somebody would
> use:
>
http://example.com/example.php?hits[user|192.168]=10000
> to forge the hit counters
I know, but he's done some funky programming above
that so it cant happen, basically; anybody accessing
the script via get/post etc (the web) would get the
welcome page, but if the script is run as a shell
script then and only then is access granted to the
above part (after meeting other conditions...)
> Homework:
>
http://www.php.net/manual/language.operators.errorcontrol.php
Yes sir....
:-)
Thanks!
Ryan
------
- The faulty interface lies between the chair and the keyboard.
- Creativity is great, but plagiarism is faster!
- Smile, everyone loves a moron. :-)
-----
Fight back spam! Download the Blue Frog.
http://www.bluesecurity.com/register/s?user=bXVzaWNndTc%3D
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com