note 46373 deleted from security.globals by aidan
| From: | aidan@php.net | Date: | Tue, 12 Apr 2005 01:49:40 +0000 |
| Subject: | note 46373 deleted from security.globals by aidan | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-87874@lists.php.net to get a copy of this message | ||
Note Submitter:
----
Register_globals could even compromise _SESSION[] :
e.g.: Client requests http://example/sheep.php?_SESSION[secured]=1
will set $_SESSION['secured']