note 35751 added to security.registerglobals
| From: | erichunley at euDOTarizonaDOTedu dot php dot net | Date: | Sat, 13 Sep 2003 04:04:27 +0000 |
| Subject: | note 35751 added to security.registerglobals | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-56420@lists.php.net to get a copy of this message | ||
As a possible way to have the best of both worlds, how about having something simple like having
register_globals = on and within your script the following:
if($HTTP_REFERER == "http://%serveripaddress%/%filename%"){
//Use Variables here
}else{
//alert to security violation
}
Thoughts?
----
Manual Page -- http://www.php.net/manual/en/security.registerglobals.php
Edit Note -- http://master.php.net/manage/user-notes.php?action=edit+35751
Delete Note -- http://master.php.net/manage/user-notes.php?action=delete+35751&report=yes
Reject Note -- http://master.php.net/manage/user-notes.php?action=reject+35751&report=yes