note 47670 added to security.globals
| From: | ryanwray at gmail dot com | Date: | Wed, 24 Nov 2004 15:03:33 +0000 |
| Subject: | note 47670 added to security.globals | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-80980@lists.php.net to get a copy of this message | ||
In reply to ben at nullcreations dot net:
This is true of the super-global $_SESSION, as it will always be processed last (it is not
considered in variables_order directive)
However, it is possible to over-write other data, namely GET, POST, COOKIE, ENVIROMENT and SERVER.
Of course, what you can overwrite will depend on the directive variables_order - by default, you
could overwrite GET and POST data via COOKIE (because cookie data is processed last out of the three
which should not really be of great concern.
My below code is irrelevant unless extract or another method which does the same thing (ie. I have
seen variable variables used before to reach the same affect) is used.
----
Manual Page -- http://www.php.net/manual/en/security.globals.php
Edit -- http://master.php.net/manage/user-notes.php?action=edit+47670
Delete -- http://master.php.net/manage/user-notes.php?action=delete+47670&report=yes
Reason: bad code -- http://master.php.net/manage/user-notes.php?action=delete+47670&report=yes&reason=bad+code
Reason: spam -- http://master.php.net/manage/user-notes.php?action=delete+47670&report=yes&reason=spam
Reason: useless example -- http://master.php.net/manage/user-notes.php?action=delete+47670&report=yes&reason=useless+example
Reason: contains commercial links -- http://master.php.net/manage/user-notes.php?action=delete+47670&report=yes&reason=contains+commercial+links
Reason: useless note -- http://master.php.net/manage/user-notes.php?action=delete+47670&report=yes&reason=useless+note
Reject -- http://master.php.net/manage/user-notes.php?action=reject+47670&report=yes
Search -- http://master.php.net/manage/user-notes.php