
PHP: Handling Forms(8/8)
Example of security problem with global form variables (continued)
Suppose a following HTML form:
<input type = "hidden" name = "tempfile" value = "/etc/passwd">
php.ini: register_globals=Off!!!
>=PHP4.2.0 by default off
Use $HTTP_POST _VAR S or $_POST instead
(36/95)
Comentários a estes Manuais