note 47260 deleted from security.globals by sean
| From: | sean@php.net | Date: | Tue, 09 Nov 2004 16:58:11 +0000 |
| Subject: | note 47260 deleted from security.globals by sean | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-80311@lists.php.net to get a copy of this message | ||
Note Submitter: brockn at gmail dot com
----
Not true because http://example/sheep.php?_SESSION[secured]=1
Would create:
Array
(
[_SESSION] => Array
(
[secure] => 1
)
)
From a different post:
Register_globals could even compromise _SESSION[] :
e.g.: Client requests http://example/sheep.php?_SESSION[secured]=1
will set $_SESSION['secured']
----
Reason: bad code