note 21955 added to security.registerglobals
| From: | ime at iae dot nl | Date: | Sat, 01 Jun 2002 12:06:00 +0000 |
| Subject: | note 21955 added to security.registerglobals | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-31321@lists.php.net to get a copy of this message | ||
> foreach ($GLOBALS AS $key=>$val) {
> eval("\$$key = '$val';");
> }
It seems to me you just substituted data poisening for real *code* injection here...
--
http://www.php.net/manual/en/security.registerglobals.php
http://master.php.net/manage/user-notes.php?action=edit+21955
http://master.php.net/manage/user-notes.php?action=delete+21955
http://master.php.net/manage/user-notes.php?action=reject+21955