dépôts / lhc / web / wiklou.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 633ef79) | patch
Active protection against register_globals vulnerabilities. Unset all globals which...
authorTim Starling <tstarling@users.mediawiki.org>
Wed, 11 Oct 2006 03:44:49 +0000 (03:44 +0000)
committerTim Starling <tstarling@users.mediawiki.org>
Wed, 11 Oct 2006 03:44:49 +0000 (03:44 +0000)
commit558487ceacffc448f077c62f535f80dbf0c4bcbf
tree88fcd107dc48bf12cbf3c1475c72188e868660c6tree | snapshot
parent633ef7923cfbff34794179dcc6694b2f03912b7ecommit | diff
Active protection against register_globals vulnerabilities. Unset all globals which have been set by $_REQUEST, in WebStart.php. All entry points must assume that a user can unset any arbitrary global set before WebStart.php is invoked. This is not usually a problem since most entry points do not set globals before WebStart.php, Yuri's APIs apparently being the only exceptions.
api.php diff | blob | history
includes/WebStart.php diff | blob | history
Wiklou, le Wiki du Wiklou