PHP :: Bug #35214 :: hijacking of private/protected properties

Bug #35214	hijacking of private/protected properties
Submitted:	2005-11-14 15:51 UTC	Modified:	2005-11-14 16:45 UTC
From:	voxus at mail dot ru	Assigned:
Status:	Not a bug	Package:	*General Issues
PHP Version:	5.1.0RC4	OS:	any
Private report:	No	CVE-ID:	None

View Add Comment Developer Edit

Anyone can comment on a bug. Have a simpler test case? Does it work for you on a different platform? Let us know!
Just going to say 'Me too!'? Don't clutter the database with that please !

Your email address: MUST BE VALID
Solve the problem: 40 - 26 = ?
Subscribe to this entry?

[2005-11-14 15:51 UTC] voxus at mail dot ru

Description:
------------
you can hijack protected properties of given object, if you're operating with it in 'inheritance context'. some thing for private ones within one class.

Reproduce code:
---------------
protected hijacking:

http://phpclub.ru/paste/index.php?show=820

private hijacking:

http://phpclub.ru/paste/index.php?show=821

tested with 5.0.5, 5.1RC1, 5.1RC4
unreproducible with 5.0.4

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports

[2005-11-14 16:45 UTC] johannes@php.net

Thank you for taking the time to write to us, but this is not
a bug. Please double-check the documentation available at
http://www.php.net/manual/ and the instructions on how to report
a bug at http://bugs.php.net/how-to-report.php

protected/public work on class level, not object level

	php.net \| support \| documentation \| report a bug \| advanced search \| search howto \| statistics \| random bug \| login
go to bug id or search bugs for


Copyright © 2001-2024 The PHP Group All rights reserved.	Last updated: Thu Apr 18 14:01:31 2024 UTC