PHP register_globals - 6:26 pm
Coding , PHP , Security -
DaRen
There are numerous ways and possibility which makes your code unsecure when PHP
register_globals directive is set to
ON.
Below are few examples:
Unsecure Example 1 [ Hide ] <?php
$_SESSION['test'] = "original";
$test = "modified";
// this will output "modified" instead of "original"
?>
Unsecure Example 2 [ Hide ] <?php
$_SESSION['test'] = $something;
// Point to the file in browser, with query append to the back:
// test.php?something=modified
// The string "modified" will be output
?>