note 9496 added to Filesystem Security
| From: | fmmarzoa at php2 dot chek dot com | Date: | Tue, 07 Nov 2000 09:24:09 +0000 |
| Subject: | note 9496 added to Filesystem Security | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-7477@lists.php.net to get a copy of this message | ||
If someone can modify $HTTP_REMOTE_USER you have a really big security trouble on your system...
There're no differences between 4-3 and 4-4 examples with $HTTP_REMOTE_USER so if someone has
modify $HTTP_REMOTE_USER you will have the same trouble in both examples, no one is securer than
other.
But... if a cracker has been lucky enought to modify $HTTP_REMOTE_USER probably he/she will have
better chances to destroy your system that modifying that variable contents
http://www.php.net/manual/security.filesystem.php