From: voxus at mail dot ru Operating system: any PHP version: 5.1.0RC4 PHP Bug Type: *General Issues Bug description: hijacking of private/protected properties
Description: ------------ you can hijack protected properties of given object, if you're operating with it in 'inheritance context'. some thing for private ones within one class. Reproduce code: --------------- protected hijacking: http://phpclub.ru/paste/index.php?show=820 private hijacking: http://phpclub.ru/paste/index.php?show=821 tested with 5.0.5, 5.1RC1, 5.1RC4 unreproducible with 5.0.4 -- Edit bug report at http://bugs.php.net/?id=35214&edit=1 -- Try a CVS snapshot (php4): http://bugs.php.net/fix.php?id=35214&r=trysnapshot4 Try a CVS snapshot (php5.0): http://bugs.php.net/fix.php?id=35214&r=trysnapshot50 Try a CVS snapshot (php5.1): http://bugs.php.net/fix.php?id=35214&r=trysnapshot51 Fixed in CVS: http://bugs.php.net/fix.php?id=35214&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=35214&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=35214&r=needtrace Need Reproduce Script: http://bugs.php.net/fix.php?id=35214&r=needscript Try newer version: http://bugs.php.net/fix.php?id=35214&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=35214&r=support Expected behavior: http://bugs.php.net/fix.php?id=35214&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=35214&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=35214&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=35214&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=35214&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=35214&r=dst IIS Stability: http://bugs.php.net/fix.php?id=35214&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=35214&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=35214&r=float No Zend Extensions: http://bugs.php.net/fix.php?id=35214&r=nozend MySQL Configuration Error: http://bugs.php.net/fix.php?id=35214&r=mysqlcfg
