note 52201 deleted from security by bjori
| From: | bjori@php.net | Date: | Wed, 12 Apr 2006 14:30:49 +0000 |
| Subject: | note 52201 deleted from security by bjori | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-107874@lists.php.net to get a copy of this message | ||
Note Submitter: administrator at galbadian dot com
----
yeah alot of people dont think about the possibility of...
Lets say a user posts $var=" " . $dbpass . " "
and your page has
echo($var)
which shows the var $dbpass (in this case the MySQL db pass)