note 22685 added to security.registerglobals
| From: | scott at abcoa dot com | Date: | Wed, 26 Jun 2002 19:31:46 +0000 |
| Subject: | note 22685 added to security.registerglobals | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-32239@lists.php.net to get a copy of this message | ||
With the register global turned off, you can use the $_GET, $_POST, $COOKIE, $_SERVER, $_ENV,
$_REQUEST or $_SESSION. If you use the hyperlink, like "<a
href='next_page.php?menu=1&submenu=1'>Next</a>". This defeated the
security purpose and allow the hacker to know the terms like "menu" or
"submenu".
--
http://www.php.net/manual/en/security.registerglobals.php
http://master.php.net/manage/user-notes.php?action=edit+22685
http://master.php.net/manage/user-notes.php?action=delete+22685
http://master.php.net/manage/user-notes.php?action=reject+22685