Sr. Web Developer
mediabistro.com
US-NY-New York

Justtechjobs.com Post A Job | Post A Resume

Comments for: starkey20021020

Message # 1014475:
Date: 12/01/02 21:52
By: Ted Behling
Subject: Security issue with $debug_ok

If you use this article's method of setting $debug_ok and you have register_globals enabled, the public could enable debugging by adding &debug_ok=1 to their GET query string. It is preferable to always explicitly set $debug_ok, as in:

if ($debug == 1 && in_array(
$_SERVER['REMOTE_ADDR'], $debug_ips ) ) {
$debug_ok = 1;
} else {
$debug_ok = 0;
}

Previous Message | Next Message


Comments:
Beginner Debugging: For Your Eyes Onlygbuisman08/03/05 11:30
it tells me i don't have Freeflashonlinegames Com 12/07/04 09:31
RE: Security issue with $debug_okJohn Starkey12/03/02 18:33
Security issue with $debug_okTed Behling12/01/02 21:52
Fair enough, but why not a log file...John Starkey10/22/02 17:58
Fair enough, but why not a log file...Oliver Tupman10/22/02 16:26
 

If you are looking for help, please post on the appropriate forum here. Your questions will be answered much more quickly.

Add A Comment:

Name:

Email:

Subject:

Message:

To reduce spam posts, messages are now manually approved

You are not [logged in]. That means your account will not get credit for this post.