note 91619 added to security.globals

From: Date: Fri, 19 Jun 2009 19:35:40 +0000
Subject: note 91619 added to security.globals
Groups: php.notes 
Request: Send a blank email to php-notes+get-157137@lists.php.net to get a copy of this message
It's not mentioned anywhere, but it seems register globals also affects file uploads. When a file is uploaded (with in this case, <input type="file" name="coconut">), the following variables appear: ["_FILES"]=> array(1) { ["coconut"]=> array(5) { ["name"]=> string(14) "mozicon128.png" ["type"]=> string(9) "image/png" ["tmp_name"]=> string(14) "/tmp/phpWgtRBx" ["error"]=> int(0) ["size"]=> int(15113) } } When register globals is turned on, the following variables also appear: ["coconut_name"]=> string(14) "mozicon128.png" ["coconut_type"]=> string(9) "image/png" ["coconut"]=> string(14) "/tmp/phpWgtRBx" ["coconut_size"]=> int(15113) ---- Server IP: 209.41.74.194 Probable Submitter: 132.198.104.37 ---- Manual Page -- http://www.php.net/manual/en/security.globals.php Edit -- https://master.php.net/note/edit/91619 Del: integrated -- https://master.php.net/note/delete/91619/integrated Del: useless -- https://master.php.net/note/delete/91619/useless Del: bad code -- https://master.php.net/note/delete/91619/bad+code Del: spam -- https://master.php.net/note/delete/91619/spam Del: non-english -- https://master.php.net/note/delete/91619/non-english Del: in docs -- https://master.php.net/note/delete/91619/in+docs Del: other reasons-- https://master.php.net/note/delete/91619 Reject -- https://master.php.net/note/reject/91619 Search -- https://master.php.net/manage/user-notes.php

« previous php.notes (#157137) next »