Re: is this if secure?

From	"J.O. Aho" <user@example.net>
Newsgroups	alt.php
Subject	Re: is this if secure?
Date	2020-03-16 20:46 +0100
Message-ID	<hda3dbFl4s1U1@mid.individual.net> (permalink)
References	<538628b6$0$2370$65785112@news.neostrada.pl> <af83b843-baca-41a6-a461-49d883be6252@googlegroups.com>

Show all headers | View raw

On 16/03/2020 12.32, robamman2020@hotmail.com wrote:
> kolmapäev, 28. mai 2014 21:15.41 UTC+3 kirjutas Netman:
>> Hello again!
>>
>> is this code secure?
>>
>> if ($_GET["action"]=="test" || $_GET["action"]=="test2")
>> {
>>      include($_GET["action"].".php");
>> }
>>
>>
>> Is it secure in your opinion?
> 
> Everything depends...But I guess it's right, when you have everything set up correctly.

The code is insecure already back in 2014. Even if you feel bored in the 
closed down Estonia due of the sars-cov-2 virus, you don't have to 
replay all old posts you find with help of google groups.

-- 

  //Aho

Back to alt.php | Previous | Next — Previous in thread | Next in thread | Find similar

Thread

Re: is this if secure? robamman2020@hotmail.com - 2020-03-16 04:32 -0700
  Re: is this if secure? "J.O. Aho" <user@example.net> - 2020-03-16 20:46 +0100
    Re: is this if secure? Kristjan Robam <robamman2020@hotmail.com> - 2020-03-19 10:11 -0700
      Re: is this if secure? "J.O. Aho" <user@example.net> - 2020-03-19 18:46 +0100
        Re: is this if secure? Kristjan Robam <robamman2020@hotmail.com> - 2020-03-19 11:18 -0700
    Re: is this if secure? Kristjan Robam <robamman2020@hotmail.com> - 2020-03-19 10:12 -0700

csiph-web