Re: Wierd ass code...

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hey Rich,

> > // Add to the running totals
> > @$hits["$username|$subnet"]++;
> > @$bytes["$username|$subnet"]+=$byte;
> > @$baps["$username|$subnet|$this_second"]++;
> > @$bapm["$username|$subnet|$this_minute"]++;
> 
> @ is suppressing the E_NOTICE error message that the
> variables are not
> pre-set.


Yep, I got that.

 
> This is BAD if register_globals is ON as it means
> that somebody would
> use:
>
http://example.com/example.php?hits[user|192.168]=10000
> to forge the hit counters


I know, but he's done some funky programming above
that so it cant happen, basically; anybody accessing
the script via get/post etc (the web) would get the
welcome page, but if the script is run as a shell
script then and only then is access granted to the
above part (after meeting other conditions...)


> Homework:
>
http://www.php.net/manual/language.operators.errorcontrol.php

Yes sir....

:-)


Thanks!
Ryan


------
- The faulty interface lies between the chair and the keyboard.
- Creativity is great, but plagiarism is faster!
- Smile, everyone loves a moron. :-)
-----
Fight back spam! Download the Blue Frog.
http://www.bluesecurity.com/register/s?user=bXVzaWNndTc%3D

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux