note 91619 added to security.globals
| From: | Andrew dot GuertinNO at SPAMuvm dot edu | Date: | Fri, 19 Jun 2009 19:35:40 +0000 |
| Subject: | note 91619 added to security.globals | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-157137@lists.php.net to get a copy of this message | ||
It's not mentioned anywhere, but it seems register globals also affects file uploads.
When a file is uploaded (with in this case, <input type="file"
name="coconut">), the following variables appear:
["_FILES"]=>
array(1) {
["coconut"]=>
array(5) {
["name"]=>
string(14) "mozicon128.png"
["type"]=>
string(9) "image/png"
["tmp_name"]=>
string(14) "/tmp/phpWgtRBx"
["error"]=>
int(0)
["size"]=>
int(15113)
}
}
When register globals is turned on, the following variables also appear:
["coconut_name"]=>
string(14) "mozicon128.png"
["coconut_type"]=>
string(9) "image/png"
["coconut"]=>
string(14) "/tmp/phpWgtRBx"
["coconut_size"]=>
int(15113)
----
Server IP: 209.41.74.194
Probable Submitter: 132.198.104.37
----
Manual Page -- http://www.php.net/manual/en/security.globals.php
Edit -- https://master.php.net/note/edit/91619
Del: integrated -- https://master.php.net/note/delete/91619/integrated
Del: useless -- https://master.php.net/note/delete/91619/useless
Del: bad code -- https://master.php.net/note/delete/91619/bad+code
Del: spam -- https://master.php.net/note/delete/91619/spam
Del: non-english -- https://master.php.net/note/delete/91619/non-english
Del: in docs -- https://master.php.net/note/delete/91619/in+docs
Del: other reasons-- https://master.php.net/note/delete/91619
Reject -- https://master.php.net/note/reject/91619
Search -- https://master.php.net/manage/user-notes.php