note 56253 added to keyword.paamayim-nekudotayim
| From: | evert at collab dot nl | Date: | Sun, 28 Aug 2005 20:21:50 +0000 |
| Subject: | note 56253 added to keyword.paamayim-nekudotayim | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-94310@lists.php.net to get a copy of this message | ||
A note to RichardBronosky's suggestion:
This is a very insecure method, never unserialize user data because they might be able upload a
totally different class.
They can only specify properties, not methods but if they can research your code they might be able
to do uninteded stuff or create a XSS attack.
So only unserialize user-data when you are in a controlled safe enviroment.
Evert
----
Manual Page -- http://www.php.net/manual/en/keyword.paamayim-nekudotayim.php
Edit -- http://master.php.net/manage/user-notes.php?action=edit+56253
Delete: added to the manual -- http://master.php.net/manage/user-notes.php?action=delete+56253&report=yes&reason=added+to+the+manual
Delete: bad code -- http://master.php.net/manage/user-notes.php?action=delete+56253&report=yes&reason=bad+code
Delete: spam -- http://master.php.net/manage/user-notes.php?action=delete+56253&report=yes&reason=spam
Delete: useless -- http://master.php.net/manage/user-notes.php?action=delete+56253&report=yes&reason=useless
Delete: non-english -- http://master.php.net/manage/user-notes.php?action=delete+56253&report=yes&reason=non-english
Delete: other reasons -- http://master.php.net/manage/user-notes.php?action=delete+56253&report=yes
Reject -- http://master.php.net/manage/user-notes.php?action=reject+56253&report=yes
Search -- http://master.php.net/manage/user-notes.php