note 30066 added to security.errors
| From: | plasticbrain at rack1 dot php dot net | Date: | Wed, 05 Mar 2003 17:07:10 +0000 |
| Subject: | note 30066 added to security.errors | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-44886@lists.php.net to get a copy of this message | ||
da404LewZer, your fix is not enough... you could exploit it by passing the url:
"/dosomething.php?username=something"
--
http://www.php.net/manual/en/security.errors.php
http://master.php.net/manage/user-notes.php?action=edit+30066
http://master.php.net/manage/user-notes.php?action=delete+30066
http://master.php.net/manage/user-notes.php?action=reject+30066