php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Request #19412 Users can change $_SERVER Vars
Submitted: 2002-09-15 00:01 UTC Modified: 2002-09-15 03:11 UTC
From: sven at darkman dot de Assigned:
Status: Not a bug Package: Feature/Change Request
PHP Version: 4.2.3 OS: Linux
Private report: No CVE-ID: None
View Developer Edit
Welcome! If you don't have a Git account, you can't do anything here.
If you reported this bug, you can edit this bug over here.
(description)
Block user comment
Status: Assign to:
Package:
Bug Type:
Summary:
From: sven at darkman dot de
New email:
PHP Version: OS:

 

 [2002-09-15 00:01 UTC] sven at darkman dot de 
I found that users may change Vars in the $_SERVER (and all
other arrays used by PHP). I don't think that a User should
be able to change such Variables. Comments?

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2002-09-15 02:31 UTC] mfischer@php.net 
Please provide an example what you mean exactly.
 [2002-09-15 03:11 UTC] derick@php.net 
Thank you for taking the time to write to us, but this is not
a bug. Please double-check the documentation available at
http://www.php.net/manual/ and the instructions on how to report
a bug at http://bugs.php.net/how-to-report.php

The $_server array is just filled at start up, you can do whatever you want with it in your script.
Of course this will never modify the \'real\' server variables and they will be reset in a request for a new script.

Derick
 
PHP Copyright © 2001-2026 The PHP Group
All rights reserved. 		Last updated: Fri Jun 19 11:00:01 2026 UTC