Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.lang.php > #15233
| From | Jerry Stuckle <jstucklex@attglobal.net> |
|---|---|
| Newsgroups | comp.lang.php |
| Subject | Re: replacing import_request_variables with extract - not working ... |
| Date | 2015-04-11 10:37 -0400 |
| Organization | A noiseless patient Spider |
| Message-ID | <mgbbgv$3s9$1@dont-email.me> (permalink) |
| References | <d047a1ae-3794-4015-ae00-2da2f62bab88@googlegroups.com> <30be9ad1-0723-4955-8903-23d156780666@googlegroups.com> |
On 4/11/2015 10:04 AM, Richard Townsend-Rose wrote: > Jerry > > thanks for that > > first to stop injection i have as below: > > this one script process's seven different foprms with some common and some other variables - never been a problem. > > but if that is what has to happen so be it. > > but never the less why does extract not work ????? > > richard > <snip code> There's never a problem until something bad happens. Then it's a huge problem. And your code does find some potential problems. But it won't stop a good hacker. Best is to handle the variables as they occur in $_POST and not try to import unknown variables into your script. This way any potentially bad stuff is isolated and won't affect the rest of your code. P.S. When replying, it's considered good form to quote the applicable parts of the message you are replying to, then reply inline or following the copied message. Most of us use real usenet readers instead of the poor Google interface to usenet, and previous messages may or may not be available. -- ================== Remove the "x" from my email address Jerry Stuckle jstucklex@attglobal.net ==================
Back to comp.lang.php | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
replacing import_request_variables with extract - not working ... Richard Townsend-Rose <richard.townsendrose@gmail.com> - 2015-04-11 06:08 -0700
Re: replacing import_request_variables with extract - not working ... Jerry Stuckle <jstucklex@attglobal.net> - 2015-04-11 09:33 -0400
Re: replacing import_request_variables with extract - not working ... Richard Townsend-Rose <richard.townsendrose@gmail.com> - 2015-04-11 07:04 -0700
Re: replacing import_request_variables with extract - not working ... Jerry Stuckle <jstucklex@attglobal.net> - 2015-04-11 10:37 -0400
Re: replacing import_request_variables with extract - not working ... "Christoph M. Becker" <cmbecker69@arcor.de> - 2015-04-11 16:11 +0200
Re: replacing import_request_variables with extract - not working ... Richard Townsend-Rose <richard.townsendrose@gmail.com> - 2015-04-11 09:05 -0700
Re: replacing import_request_variables with extract - not working ... Richard Yates <richard@yatesguitar.com> - 2015-04-11 09:24 -0700
Re: replacing import_request_variables with extract - not working ... "Christoph M. Becker" <cmbecker69@arcor.de> - 2015-04-11 19:23 +0200
Re: replacing import_request_variables with extract - not working ... Jerry Stuckle <jstucklex@attglobal.net> - 2015-04-11 14:44 -0400
csiph-web