note 48923 added to function.header

From: Date: Wed, 12 Jan 2005 04:09:12 +0000
Subject: note 48923 added to function.header
Groups: php.notes 
Request: Send a blank email to php-notes+get-83116@lists.php.net to get a copy of this message
If the below post didn't make this clear... be VERY VERY CAREFUL with download scripts! I had a vulnerability for years in my download counting script; namely, the user could download ANY file on the server. Including the PHP files that contained my database password! The same potential vulnerability applies to any script that displays or downloads files from your server. Caveat scriptor (let the programmer beware; and no, that's not proper Latin)! ---- Manual Page -- http://www.php.net/manual/en/function.header.php Edit -- http://master.php.net/manage/user-notes.php?action=edit+48923 Delete -- http://master.php.net/manage/user-notes.php?action=delete+48923&report=yes Reason: bad code -- http://master.php.net/manage/user-notes.php?action=delete+48923&report=yes&reason=bad+code Reason: spam -- http://master.php.net/manage/user-notes.php?action=delete+48923&report=yes&reason=spam Reason: useless example -- http://master.php.net/manage/user-notes.php?action=delete+48923&report=yes&reason=useless+example Reason: contains commercial links -- http://master.php.net/manage/user-notes.php?action=delete+48923&report=yes&reason=contains+commercial+links Reason: useless note -- http://master.php.net/manage/user-notes.php?action=delete+48923&report=yes&reason=useless+note Reject -- http://master.php.net/manage/user-notes.php?action=reject+48923&report=yes Search -- http://master.php.net/manage/user-notes.php

« previous php.notes (#83116) next »