note 48923 added to function.header
| From: | crispiness at fastmail dot fm | Date: | Wed, 12 Jan 2005 04:09:12 +0000 |
| Subject: | note 48923 added to function.header | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-83116@lists.php.net to get a copy of this message | ||
If the below post didn't make this clear... be VERY VERY CAREFUL with download scripts! I had a
vulnerability for years in my download counting script; namely, the user could download ANY file on
the server. Including the PHP files that contained my database password!
The same potential vulnerability applies to any script that displays or downloads files from your
server. Caveat scriptor (let the programmer beware; and no, that's not proper Latin)!
----
Manual Page -- http://www.php.net/manual/en/function.header.php
Edit -- http://master.php.net/manage/user-notes.php?action=edit+48923
Delete -- http://master.php.net/manage/user-notes.php?action=delete+48923&report=yes
Reason: bad code -- http://master.php.net/manage/user-notes.php?action=delete+48923&report=yes&reason=bad+code
Reason: spam -- http://master.php.net/manage/user-notes.php?action=delete+48923&report=yes&reason=spam
Reason: useless example -- http://master.php.net/manage/user-notes.php?action=delete+48923&report=yes&reason=useless+example
Reason: contains commercial links -- http://master.php.net/manage/user-notes.php?action=delete+48923&report=yes&reason=contains+commercial+links
Reason: useless note -- http://master.php.net/manage/user-notes.php?action=delete+48923&report=yes&reason=useless+note
Reject -- http://master.php.net/manage/user-notes.php?action=reject+48923&report=yes
Search -- http://master.php.net/manage/user-notes.php