php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #35214 hijacking of private/protected properties
Submitted: 2005-11-14 15:51 UTC Modified: 2005-11-14 16:45 UTC
From: voxus at mail dot ru Assigned:
Status: Not a bug Package: *General Issues
PHP Version: 5.1.0RC4 OS: any
Private report: No CVE-ID:
 [2005-11-14 15:51 UTC] voxus at mail dot ru
Description:
------------
you can hijack protected properties of given object, if you're operating with it in 'inheritance context'. some thing for private ones within one class.

Reproduce code:
---------------
protected hijacking:

http://phpclub.ru/paste/index.php?show=820

private hijacking:

http://phpclub.ru/paste/index.php?show=821

tested with 5.0.5, 5.1RC1, 5.1RC4
unreproducible with 5.0.4


Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2005-11-14 16:45 UTC] johannes@php.net
Thank you for taking the time to write to us, but this is not
a bug. Please double-check the documentation available at
http://www.php.net/manual/ and the instructions on how to report
a bug at http://bugs.php.net/how-to-report.php

protected/public work on class level, not object level  
 
PHP Copyright © 2001-2014 The PHP Group
All rights reserved.
Last updated: Fri Apr 18 23:01:58 2014 UTC