ID:               17006
 Updated by:       [EMAIL PROTECTED]
 Reported By:      [EMAIL PROTECTED]
-Status:           Open
+Status:           Bogus
 Bug Type:         Output Control
 Operating System: Slackware 8.0
 PHP Version:      4.2.0
 New Comment:

Turn on register_globals in your php.ini file.  And I sure hope you are
doing some sanity checking on this $id.  What happens if someone puts
id=/etc/passwd in the URL?


Previous Comments:
------------------------------------------------------------------------

[2002-05-04 17:00:20] [EMAIL PROTECTED]

Hi,
My web-site is set up using php include "$id", with id being set in the
Address bar. This worked fine on PHP4.1.2, on 4.2.0 tho (Apache
1.3.20), it always loads the same, default id. the "." one.. when I try
an echo "id" it coms up with nothing, so PHP isn't seeing the $id=xyz
part.
http://games.nexusirc.org if you want to take a look - as you can see,
even though the id is clearly there, the ID pages (which used to load
on PHP4.1.2) dont appear.

------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=17006&edit=1

Reply via email to