note 109188 added to security

Features for manipulation of input data: - Additional or lack of form variables It will send only pass variables from a form provided by the attacker set and not all the form variables like the real thing. BSP: <form ...> <input name="name"> <input name="password"> <input name="optional"> $ _POST ['Name'] = "root"; $ _POST ['Password'] = "12345"; $ _POST ['Optional'] would be missing - Session ID does not match the standard Session ID is guessed or tried themselves together, making it too short or contains incorrect characters BSP: http://www.google.de/?sid=ABCDabcd1234 instead of http://www.google.de/?sid=ABCD% 2Cabcd-1234 - Hidden, select, checkbox variables do not correspond to the model The transmitted values ​​are different from the predefined values ​​of the above fields BSP: <select name="auswahl"> <option value="1"> One </ option> <option value="2"> Two </ option> <option value="3"> Three </ option> </ select> $ _POST ['Selection'] = 'a'; No integer value - Source of variables (get, post, cookie) do not match The attacker tries to parameter passing some variables to set or influence BSP: http://google.de/?login=true $ _GET ['Login'] = true instead of $ _COOKIE ['Login'] = true ---- Server IP: 158.255.214.58 Probable Submitter: 143.93.184.66 ---- Manual Page -- http://www.php.net/manual/en/security.php Edit -- https://master.php.net/note/edit/109188 Del: integrated -- https://master.php.net/note/delete/109188/integrated Del: useless -- https://master.php.net/note/delete/109188/useless Del: bad code -- https://master.php.net/note/delete/109188/bad+code Del: spam -- https://master.php.net/note/delete/109188/spam Del: non-english -- https://master.php.net/note/delete/109188/non-english Del: in docs -- https://master.php.net/note/delete/109188/in+docs Del: other reasons-- https://master.php.net/note/delete/109188 Reject -- https://master.php.net/note/reject/109188 Search -- https://master.php.net/manage/user-notes.php