note 16910 added to function.extract
| From: | junk dot phpnet at gasolinemm dot com | Date: | Sun, 18 Nov 2001 22:16:06 +0000 |
| Subject: | note 16910 added to function.extract | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-20983@lists.php.net to get a copy of this message | ||
You will have a hard time accessing the output variable
for a key that has a space in its name. Personally, I
still do not know how to access the output variable
(or whether it had actually been created).
$oz = array("tin man" => "heart");
extract($oz);
echo $tin man; // parse error;
echo ${tin man}; // parse error;
echo $tin_man; // no such variable
This suggest that there might be some security issues
regarding extract(). Consider if it was used from a array
populated from a user input.
--
http://www.php.net/manual/en/function.extract.php
http://master.php.net/manage/user-notes.php?action=edit+16910
http://master.php.net/manage/user-notes.php?action=delete+16910
http://master.php.net/manage/user-notes.php?action=reject+16910