Re: Should I check imput for bad chars in this case?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thu, Apr 26, 2012 at 3:59 PM, mirrys.net <mirrys.net@xxxxxxxxx> wrote:
> Thank you for your help Marco & Simon. No doubt, your code is much
> cleaner and better.
>
> One more question, without any filter or something could be my
> original code somehow compromised (mean some security bug)? Or rather
> was a major problem in the possibility of a script crash?
>

Hi, Mirrys

I personally can not see a security-hole at the first view ...
Stuff in the global server-variable should only be set by the
webserver and therefore it should be kind-of save (depending on the
quality of the configuration of the webserver ;))

That was also the main reason why I would do a validation-check for this.
Talking about a script-crash ... I don't know ... I just found this
line in a comment for the function gethostbyaddress()

> If you use gethostbyaddr() with a bad IP address then it will send an error message to the error log.

Bye
Simon

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux