note 47260 added to security.globals
| From: | brockn at gmail dot com | Date: | Mon, 08 Nov 2004 23:49:35 +0000 |
| Subject: | note 47260 added to security.globals | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-80303@lists.php.net to get a copy of this message | ||
Not true because http://example/sheep.php?_SESSION[secured]=1
Would create:
Array
(
[_SESSION] => Array
(
[secure] => 1
)
)
From a different post:
Register_globals could even compromise _SESSION[] :
e.g.: Client requests http://example/sheep.php?_SESSION[secured]=1
will set $_SESSION['secured']
----
Manual Page -- http://www.php.net/manual/en/security.globals.php
Edit -- http://master.php.net/manage/user-notes.php?action=edit+47260
Delete -- http://master.php.net/manage/user-notes.php?action=delete+47260&report=yes
Reason: bad code -- http://master.php.net/manage/user-notes.php?action=delete+47260&report=yes&reason=bad+code
Reason: spam -- http://master.php.net/manage/user-notes.php?action=delete+47260&report=yes&reason=spam
Reason: useless example -- http://master.php.net/manage/user-notes.php?action=delete+47260&report=yes&reason=useless+example
Reason: contains commercial links -- http://master.php.net/manage/user-notes.php?action=delete+47260&report=yes&reason=contains+commercial+links
Reason: useless note -- http://master.php.net/manage/user-notes.php?action=delete+47260&report=yes&reason=useless+note
Reject -- http://master.php.net/manage/user-notes.php?action=reject+47260&report=yes
Search -- http://master.php.net/manage/user-notes.php