note 43706 added to security.variables
| From: | rick at NOSPAM dot exploringnatalie dot com | Date: | Wed, 30 Jun 2004 22:31:25 +0000 |
| Subject: | note 43706 added to security.variables | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-72200@lists.php.net to get a copy of this message | ||
As I have to have register_globals turned on, I use this similar bit to protect against
register_globals related variable attacks. (I also run the foreach on $_POST, etc...)
foreach ($_GET as $getvarname => $rawgetcontent)
{
unset($$getvarname);
// OTHER PROTECTION CODE
}
As far as I can tell, this is effective...
----
Manual Page -- http://www.php.net/manual/en/security.variables.php
Edit -- http://master.php.net/manage/user-notes.php?action=edit+43706
Delete -- http://master.php.net/manage/user-notes.php?action=delete+43706&report=yes
Reject -- http://master.php.net/manage/user-notes.php?action=reject+43706&report=yes
Search -- http://master.php.net/manage/user-notes.php