note 102149 deleted from function.ini-restore by danbrown
| From: | danbrown@php.net | Date: | Sat, 29 Jan 2011 22:03:24 +0000 |
| Subject: | note 102149 deleted from function.ini-restore by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-176501@lists.php.net to get a copy of this message | ||
Note Submitter: john at host89 dot net
----
In regards to eli at ski-forums dot com's conern:
I appears that this function restores the setting to whatever is set in the INI file, as opposed to
the PHP defaults.
For example, if you set the session.use_cookies value to false, and then wanted to put it back,
ini_restore() would set it to whatever the value is in the INI file.
Therefore, if that hunk of code was run on a server that had its INI file configured to resist that
attack, the code would do nothing. (I'm not 100% on this, but that's what appears to be
going on. Somebody please correct me if I'm wrong.)