Anonymous on :
Might have been useful to mention magic_quotes_sybase in your discussion of magic quotes. Also, your alternative register_globals exploit example doesn't mention the more insidious possibilities of http://www.colder.ch/news/09-09-2005/4/another-example-showing-t.html
It certainly would be nice if setting array offsets in an uninitialized variable was E_NOTICE. Neatly provides the tools to detect both of the alternate formulations of the register_globals issue.
(Previously brought up on internals by the author of that article: http://news.php.net/php.internals/18666 )
It certainly would be nice if setting array offsets in an uninitialized variable was E_NOTICE. Neatly provides the tools to detect both of the alternate formulations of the register_globals issue.
(Previously brought up on internals by the author of that article: http://news.php.net/php.internals/18666 )
Rombert is a geek on : PHP conferences slides
phpXperts on : PHP Security Slides Online
S.S. Intrepid on : php | works: day 2