Miss-Ruth Posted December 9, 2010 Share Posted December 9, 2010 To prevent PHP form Hijacking it's best to Turn off the register_globals. correct? But some of my applications stop responding when it's turned off. What is the risk? Any solution to avoid the risk? Thanks. Ruth. Link to comment https://forums.phpfreaks.com/topic/221102-hijacking/ Share on other sites More sharing options...
OldWest Posted December 9, 2010 Share Posted December 9, 2010 To prevent PHP form Hijacking it's best to Turn off the register_globals. correct? But some of my applications stop responding when it's turned off. What is the risk? Any solution to avoid the risk? Thanks. Ruth. register_globals should always be off. Sounds like your scripts were developed some years ago (using php4) because register_globals was a thing of the past. Its very insecure since you don't need to declare your passed variables. Therefore, it's really easy to pass bad or harmful data through your scripts - and you never know what could go through. You should hire me to upgrade your scripts ; ) Link to comment https://forums.phpfreaks.com/topic/221102-hijacking/#findComment-1144837 Share on other sites More sharing options...
Zurev Posted December 9, 2010 Share Posted December 9, 2010 You should hire me to upgrade your scripts ; ) Seems like someone changed the hijacking php scripts thread to hijacking the thread into freelance! Link to comment https://forums.phpfreaks.com/topic/221102-hijacking/#findComment-1144841 Share on other sites More sharing options...
OldWest Posted December 9, 2010 Share Posted December 9, 2010 You should hire me to upgrade your scripts ; ) Seems like someone changed the hijacking php scripts thread to hijacking the thread into freelance! haha! That's funny stuff. Link to comment https://forums.phpfreaks.com/topic/221102-hijacking/#findComment-1144843 Share on other sites More sharing options...
Miss-Ruth Posted December 9, 2010 Author Share Posted December 9, 2010 $OldWest = $_POST['OldWest'] if($OldWest = strip_tags($OldWest) && htmlentities($OldWest) && utf8_decode($OldWest) && stripslashes ($OldWest)) { echo "lol"; }; Thanks Guys!!! GOt it fixed. Link to comment https://forums.phpfreaks.com/topic/221102-hijacking/#findComment-1144883 Share on other sites More sharing options...
OldWest Posted December 9, 2010 Share Posted December 9, 2010 mark SOLVED! Link to comment https://forums.phpfreaks.com/topic/221102-hijacking/#findComment-1144998 Share on other sites More sharing options...
Miss-Ruth Posted December 10, 2010 Author Share Posted December 10, 2010 sure... why not! Ruth. Link to comment https://forums.phpfreaks.com/topic/221102-hijacking/#findComment-1145199 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.