Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.lang.php > #14655
| Path | csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!weretis.net!feeder4.news.weretis.net!feeder1.news.weretis.net!news.solani.org!.POSTED!not-for-mail |
|---|---|
| From | "Christoph M. Becker" <cmbecker69@arcor.de> |
| Newsgroups | comp.lang.php |
| Subject | Re: php challenge |
| Date | Thu, 27 Nov 2014 21:12:01 +0100 |
| Organization | solani.org |
| Lines | 18 |
| Message-ID | <m580i8$cph$1@solani.org> (permalink) |
| References | <aea937c1-40e4-4b95-9857-8492730248de@googlegroups.com> <m57rt5$s2e$1@solani.org> <m57td8$uqd$1@dont-email.me> |
| Mime-Version | 1.0 |
| Content-Type | text/plain; charset=windows-1252 |
| Content-Transfer-Encoding | 7bit |
| X-Trace | solani.org 1417119112 13105 eJwFwYEBwDAEBMCVBP9hnAr2H6F3MB6+6wQdiz3uEg3OhE9MbUVZZD+oJrq+5qbolTanSv4exRDi (27 Nov 2014 20:11:52 GMT) |
| X-Complaints-To | abuse@news.solani.org |
| NNTP-Posting-Date | Thu, 27 Nov 2014 20:11:52 +0000 (UTC) |
| User-Agent | Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Thunderbird/31.2.0 |
| X-User-ID | eJwNycEBwCAIA8CVQAjCOErK/iPY+x4sNHp7IByD6eNRSxQ6UTmcFpYjP+57/l1mnS7Dy6RgPSLvEZQ= |
| In-Reply-To | <m57td8$uqd$1@dont-email.me> |
| Cancel-Lock | sha1:To0yM9BIgUBr1OIgy0i46Dwga4E= |
| X-NNTP-Posting-Host | eJwFwYERACAIA7GZPP0C42iV/UcwYWrIsYQWTVcSbvPOXbsGL66R8FbLZ5LUzDMcFZnwASi/EQA= |
| Xref | csiph.com comp.lang.php:14655 |
Show key headers only | View raw
Jerry Stuckle wrote: >> If register_globals[1]=On that would be easy (because $loggedIn is not >> necessarily initialized, and it is tested for being == true, instead of >> === true). Fortunately, that misfeature had been removed as of PHP 5.4. >> >> [1] <http://php.net/manual/en/security.globals.php> > > And has been recommended AGAINST use for several years now, for this > very reason. IMO the possibility to set global variables from user input should have never been introduced in the first place; it's even slightly more insane than automatically escaping user input (magic_quotes_*). -- Christoph M. Becker
Back to comp.lang.php | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
php challenge Kiuhnm Mnhuik <gandalf23@mail.com> - 2014-11-27 09:12 -0800
Re: php challenge Jerry Stuckle <jstucklex@attglobal.net> - 2014-11-27 13:40 -0500
Re: php challenge Kiuhnm Mnhuik <gandalf23@mail.com> - 2014-11-27 11:31 -0800
Re: php challenge Jerry Stuckle <jstucklex@attglobal.net> - 2014-11-27 15:27 -0500
Re: php challenge Kiuhnm Mnhuik <gandalf23@mail.com> - 2014-11-27 15:55 -0800
Re: php challenge Jerry Stuckle <jstucklex@attglobal.net> - 2014-11-27 20:35 -0500
Re: php challenge Kiuhnm Mnhuik <gandalf23@mail.com> - 2014-11-27 19:16 -0800
Re: php challenge Jerry Stuckle <jstucklex@attglobal.net> - 2014-11-28 09:10 -0500
Re: php challenge Kiuhnm Mnhuik <gandalf23@mail.com> - 2014-11-28 12:52 -0800
Re: php challenge Jerry Stuckle <jstucklex@attglobal.net> - 2014-11-28 16:32 -0500
Re: php challenge "Christoph M. Becker" <cmbecker69@arcor.de> - 2014-11-27 19:52 +0100
Re: php challenge Jerry Stuckle <jstucklex@attglobal.net> - 2014-11-27 14:18 -0500
Re: php challenge "Christoph M. Becker" <cmbecker69@arcor.de> - 2014-11-27 21:12 +0100
Re: php challenge Jerry Stuckle <jstucklex@attglobal.net> - 2014-11-27 15:28 -0500
Re: php challenge Kiuhnm Mnhuik <gandalf23@mail.com> - 2014-11-27 12:00 -0800
Re: php challenge Jerry Stuckle <jstucklex@attglobal.net> - 2014-11-27 15:30 -0500
Re: php challenge Kiuhnm Mnhuik <gandalf23@mail.com> - 2014-11-27 15:02 -0800
Re: php challenge Jerry Stuckle <jstucklex@attglobal.net> - 2014-11-27 20:36 -0500
Re: php challenge Kiuhnm Mnhuik <gandalf23@mail.com> - 2014-11-27 19:18 -0800
csiph-web