PHP :: Request #19412 :: Users can change $

Request #19412	Users can change $_SERVER Vars
Submitted:	2002-09-15 00:01 UTC	Modified:	2002-09-15 03:11 UTC
From:	sven at darkman dot de	Assigned:
Status:	Not a bug	Package:	Feature/Change Request
PHP Version:	4.2.3	OS:	Linux
Private report:	No	CVE-ID:	None

View Add Comment Developer Edit

Anyone can comment on a bug. Have a simpler test case? Does it work for you on a different platform? Let us know!
Just going to say 'Me too!'? Don't clutter the database with that please !

Your email address: MUST BE VALID
Solve the problem: 31 - 19 = ?
Subscribe to this entry?

[2002-09-15 00:01 UTC] sven at darkman dot de

I found that users may change Vars in the $_SERVER (and all
other arrays used by PHP). I don't think that a User should
be able to change such Variables. Comments?

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports

[2002-09-15 02:31 UTC] mfischer@php.net

Please provide an example what you mean exactly.

[2002-09-15 03:11 UTC] derick@php.net

Thank you for taking the time to write to us, but this is not
a bug. Please double-check the documentation available at
http://www.php.net/manual/ and the instructions on how to report
a bug at http://bugs.php.net/how-to-report.php

The $_server array is just filled at start up, you can do whatever you want with it in your script.
Of course this will never modify the \'real\' server variables and they will be reset in a request for a new script.

Derick

	php.net \| support \| documentation \| report a bug \| advanced search \| search howto \| statistics \| random bug \| login
go to bug id or search bugs for


Copyright © 2001-2024 The PHP Group All rights reserved.	Last updated: Mon Jul 22 04:01:29 2024 UTC