note 46373 added to security.globals
| From: | php-general at lists dot php dot net | Date: | Fri, 08 Oct 2004 17:29:31 +0000 |
| Subject: | note 46373 added to security.globals | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-78187@lists.php.net to get a copy of this message | ||
Register_globals could even compromise _SESSION[] :
e.g.: Client requests http://example/sheep.php?_SESSION[secured]=1
will set $_SESSION['secured']
----
Manual Page -- http://www.php.net/manual/en/security.globals.php
Edit -- http://master.php.net/manage/user-notes.php?action=edit+46373
Delete -- http://master.php.net/manage/user-notes.php?action=delete+46373&report=yes
Reject -- http://master.php.net/manage/user-notes.php?action=reject+46373&report=yes
Search -- http://master.php.net/manage/user-notes.php