note 42270 added to language.variables.predefined
| From: | bryan at nolifeline dot com | Date: | Mon, 10 May 2004 16:07:29 +0000 |
| Subject: | note 42270 added to language.variables.predefined | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-69414@lists.php.net to get a copy of this message | ||
to marcbender at mail dot com
unset the globals
use a preg_replace ( pattern: |\;[^\;]*$i[^\;]*\;|Uis, replacement: ";", where $i is the
name of any function/variable you wish to prevent access to.) on the code-to-be-evaled. ideas are
"global", "fopen", "mysql_connect", etc. You know, anything that you
wouldn't want to give a hyperactive 13 year old access to.
execute the code.
----
Manual Page -- http://www.php.net/manual/en/language.variables.predefined.php
Edit -- http://master.php.net/manage/user-notes.php?action=edit+42270
Delete -- http://master.php.net/manage/user-notes.php?action=delete+42270&report=yes
Reject -- http://master.php.net/manage/user-notes.php?action=reject+42270&report=yes
Search -- http://master.php.net/manage/user-notes.php