Re: Segfault in PHP 5.2.1
| From: | Rasmus Lerdorf | Date: | Tue, 24 Apr 2007 16:16:46 +0000 |
| Subject: | Re: Segfault in PHP 5.2.1 | ||
| References: | 1 2 3 4 5 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-28986@lists.php.net to get a copy of this message | ||
Chris Malton wrote:
> // secure variables from outside
> $modxtags = array('@<script[^>]*?>.*?</script>@si',
> '@&#(\d+);@e',
> '@\[\[(.*?)\]\]@si',
> '@\[!(.*?)!\]@si',
> '@\[\~(.*?)\~\]@si',
> '@\[\((.*?)\)\]@si',
> '@{{(.*?)}}@si',
> '@\[\*(.*?)\*\]@si');
> foreach($_POST as $key => $value) {
> $_POST[$key] = preg_replace($modxtags,"", $value);
> }
> foreach($_GET as $key => $value) {
> $_GET[$key] = preg_replace($modxtags,"", $value);
> }
I find this part funny. I wonder what they think this is securing.
-Rasmus