Miss-Ruth Posted December 9, 2010 Share Posted December 9, 2010 To prevent PHP form Hijacking it's best to Turn off the register_globals. correct? But some of my applications stop responding when it's turned off. What is the risk? Any solution to avoid the risk? Thanks. Ruth. Quote Link to comment https://forums.phpfreaks.com/topic/221102-hijacking/ Share on other sites More sharing options...
OldWest Posted December 9, 2010 Share Posted December 9, 2010 To prevent PHP form Hijacking it's best to Turn off the register_globals. correct? But some of my applications stop responding when it's turned off. What is the risk? Any solution to avoid the risk? Thanks. Ruth. register_globals should always be off. Sounds like your scripts were developed some years ago (using php4) because register_globals was a thing of the past. Its very insecure since you don't need to declare your passed variables. Therefore, it's really easy to pass bad or harmful data through your scripts - and you never know what could go through. You should hire me to upgrade your scripts ; ) Quote Link to comment https://forums.phpfreaks.com/topic/221102-hijacking/#findComment-1144837 Share on other sites More sharing options...
Zurev Posted December 9, 2010 Share Posted December 9, 2010 You should hire me to upgrade your scripts ; ) Seems like someone changed the hijacking php scripts thread to hijacking the thread into freelance! Quote Link to comment https://forums.phpfreaks.com/topic/221102-hijacking/#findComment-1144841 Share on other sites More sharing options...
OldWest Posted December 9, 2010 Share Posted December 9, 2010 You should hire me to upgrade your scripts ; ) Seems like someone changed the hijacking php scripts thread to hijacking the thread into freelance! haha! That's funny stuff. Quote Link to comment https://forums.phpfreaks.com/topic/221102-hijacking/#findComment-1144843 Share on other sites More sharing options...
Miss-Ruth Posted December 9, 2010 Author Share Posted December 9, 2010 $OldWest = $_POST['OldWest'] if($OldWest = strip_tags($OldWest) && htmlentities($OldWest) && utf8_decode($OldWest) && stripslashes ($OldWest)) { echo "lol"; }; Thanks Guys!!! GOt it fixed. Quote Link to comment https://forums.phpfreaks.com/topic/221102-hijacking/#findComment-1144883 Share on other sites More sharing options...
OldWest Posted December 9, 2010 Share Posted December 9, 2010 mark SOLVED! Quote Link to comment https://forums.phpfreaks.com/topic/221102-hijacking/#findComment-1144998 Share on other sites More sharing options...
Miss-Ruth Posted December 10, 2010 Author Share Posted December 10, 2010 sure... why not! Ruth. Quote Link to comment https://forums.phpfreaks.com/topic/221102-hijacking/#findComment-1145199 Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.