note 107077 added to function.eregi
| From: | darren at dmcdonald dot net | Date: | Thu, 05 Jan 2012 10:32:05 +0000 |
| Subject: | note 107077 added to function.eregi | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-185371@lists.php.net to get a copy of this message | ||
Please please please do not use the sanitisation examples in the other notes on this page. Any
filtering done using eregi can be bypassed if an attacker places their 'bad' attack string
after a null byte.
----
Server IP: 69.147.83.197
Probable Submitter: 86.182.169.231
----
Manual Page -- http://www.php.net/manual/en/function.eregi.php
Edit -- https://master.php.net/note/edit/107077
Del: integrated -- https://master.php.net/note/delete/107077/integrated
Del: useless -- https://master.php.net/note/delete/107077/useless
Del: bad code -- https://master.php.net/note/delete/107077/bad+code
Del: spam -- https://master.php.net/note/delete/107077/spam
Del: non-english -- https://master.php.net/note/delete/107077/non-english
Del: in docs -- https://master.php.net/note/delete/107077/in+docs
Del: other reasons-- https://master.php.net/note/delete/107077
Reject -- https://master.php.net/note/reject/107077
Search -- https://master.php.net/manage/user-notes.php