note 66935 added to reserved.variables
| From: | pepieti at gmail dot com | Date: | Thu, 01 Jun 2006 11:23:20 +0000 |
| Subject: | note 66935 added to reserved.variables | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-112737@lists.php.net to get a copy of this message | ||
If you absolutely want to use $_GET variable to include or open something you should use the
basename function to at least restrict access to specific folder.
Use something like this
<?php
if($_GET['page']){
$page = basename($_GET['page']);
include($page.".php");
}
else{
include("frontpage.php");
}
?>
----
Server IP: 62.237.7.3
Probable Submitter: 85.131.92.54
----
X-Spam-Status: No, hits=3.1 required=5.0 tests=DATE_MISSING,FROM_NO_LOWER
autolearn=no version=2.64
----
Manual Page -- http://www.php.net/manual/en/reserved.variables.php
Edit -- http://master.php.net/note/edit/66935
Del: integrated -- http://master.php.net/note/delete/66935/integrated
Del: useless -- http://master.php.net/note/delete/66935/useless
Del: bad code -- http://master.php.net/note/delete/66935/bad+code
Del: spam -- http://master.php.net/note/delete/66935/spam
Del: non-english -- http://master.php.net/note/delete/66935/non-english
Del: in docs -- http://master.php.net/note/delete/66935/in+docs
Del: other reasons-- http://master.php.net/note/delete/66935
Reject -- http://master.php.net/note/reject/66935
Search -- http://master.php.net/manage/user-notes.php