note 74928 deleted from security.globals by tularis

Note Submitter: jfunk ---- You can accidentally poison some session variables yourself if you aren't careful. When debugging someone else's code I found an inadvertent overwrite <? //$_SESSION['name'] is used as the logged in user's name for greetings on several pages echo "Hello $_SESSION[name]"; ... //The the user uses a form to add a new user $name = "$_POST[name]"; $result= mysql_query("INSERT INTO user SET name = '$name'") ?> $_SESSION['name'] is overwritten because the programmer used $name as a variable and then wrote to it.