Re: Using 'header' as redirect
| From: | Martin Alterisio | Date: | Tue, 30 May 2006 16:27:15 +0000 |
| Subject: | Re: Using 'header' as redirect | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-237093@lists.php.net to get a copy of this message | ||
2006/5/30, Philip Thompson <prthomp@uark.edu>:
<? if ($subPage = $_GET['page']) include ("$subPage"); ?>Are you checking what the user is sending inside $_GET['page']? If not, your system is vulnerable to a remote file injection.