note 107077 deleted from function.eregi by danbrown
| From: | danbrown@php.net | Date: | Fri, 06 Jan 2012 19:16:45 +0000 |
| Subject: | note 107077 deleted from function.eregi by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-185410@lists.php.net to get a copy of this message | ||
Note Submitter: darren at dmcdonald dot net
----
Please please please do not use the sanitisation examples in the other notes on this page. Any
filtering done using eregi can be bypassed if an attacker places their 'bad' attack string
after a null byte.