note 56253 added to keyword.paamayim-nekudotayim

From: Date: Sun, 28 Aug 2005 20:21:50 +0000
Subject: note 56253 added to keyword.paamayim-nekudotayim
Groups: php.notes 
Request: Send a blank email to php-notes+get-94310@lists.php.net to get a copy of this message
A note to RichardBronosky's suggestion: This is a very insecure method, never unserialize user data because they might be able upload a totally different class. They can only specify properties, not methods but if they can research your code they might be able to do uninteded stuff or create a XSS attack. So only unserialize user-data when you are in a controlled safe enviroment. Evert ---- Manual Page -- http://www.php.net/manual/en/keyword.paamayim-nekudotayim.php Edit -- http://master.php.net/manage/user-notes.php?action=edit+56253 Delete: added to the manual -- http://master.php.net/manage/user-notes.php?action=delete+56253&report=yes&reason=added+to+the+manual Delete: bad code -- http://master.php.net/manage/user-notes.php?action=delete+56253&report=yes&reason=bad+code Delete: spam -- http://master.php.net/manage/user-notes.php?action=delete+56253&report=yes&reason=spam Delete: useless -- http://master.php.net/manage/user-notes.php?action=delete+56253&report=yes&reason=useless Delete: non-english -- http://master.php.net/manage/user-notes.php?action=delete+56253&report=yes&reason=non-english Delete: other reasons -- http://master.php.net/manage/user-notes.php?action=delete+56253&report=yes Reject -- http://master.php.net/manage/user-notes.php?action=reject+56253&report=yes Search -- http://master.php.net/manage/user-notes.php

« previous php.notes (#94310) next »