note 21955 deleted from security.registerglobals by philip
| From: | philip@php.net | Date: | Mon, 02 Dec 2002 20:12:47 +0000 |
| Subject: | note 21955 deleted from security.registerglobals by philip | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-40265@lists.php.net to get a copy of this message | ||
> foreach ($GLOBALS AS $key=>$val) {
> eval("\$$key = '$val';");
> }
It seems to me you just substituted data poisening for real *code* injection here...