note 76550 added to security.globals
| From: | alanhogan at osu1 dot php dot net | Date: | Fri, 20 Jul 2007 03:08:09 +0000 |
| Subject: | note 76550 added to security.globals | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-128752@lists.php.net to get a copy of this message | ||
Useful for shared hosting or scripts that you are sharing with other people.
<?php
// Effectively turn off dangerous register_globals without having to edit php.ini
if (ini_get(register_globals)) // If register_globals is enabled
{ // Unset $_GET keys
foreach ($_GET as $get_key => $get_value) {
if (ereg('^([a-zA-Z]|_){1}([a-zA-Z0-9]|_)*$', $get_key))
eval("unset(\${$get_key});");
} // Unset $_POST keys
foreach ($_POST as $post_key => $post_value) {
if (ereg('^([a-zA-Z]|_){1}([a-zA-Z0-9]|_)*$', $post_key))
eval("unset(\${$post_key});");
} // Unset $_REQUEST keys
foreach ($_REQUEST as $request_key => $request_value) {
if (ereg('^([a-zA-Z]|_){1}([a-zA-Z0-9]|_)*$', $request_key))
eval("unset(\${$request_key});");
}
}
?>
----
Server IP: 208.69.120.35
Probable Submitter: 72.95.251.43
----
Manual Page -- http://www.php.net/manual/en/security.globals.php
Edit -- https://master.php.net/note/edit/76550
Del: integrated -- https://master.php.net/note/delete/76550/integrated
Del: useless -- https://master.php.net/note/delete/76550/useless
Del: bad code -- https://master.php.net/note/delete/76550/bad+code
Del: spam -- https://master.php.net/note/delete/76550/spam
Del: non-english -- https://master.php.net/note/delete/76550/non-english
Del: in docs -- https://master.php.net/note/delete/76550/in+docs
Del: other reasons-- https://master.php.net/note/delete/76550
Reject -- https://master.php.net/note/reject/76550
Search -- https://master.php.net/manage/user-notes.php