Re: Run-time taint support proposal
| From: | Stanislav Malyshev | Date: | Sat, 16 Dec 2006 00:01:32 +0000 |
| Subject: | Re: Run-time taint support proposal | ||
| References: | 1 2 3 4 5 6 7 8 9 10 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-27010@lists.php.net to get a copy of this message | ||
the harm. One simple exploit leading to information disclosure is to pass it an array() causing the function to generate an error exposing the script's path.You mean when running with display_errors = on? Ouch. -- Stanislav Malyshev, Zend Products Engineer stas@zend.com http://www.zend.com/