ID:               9767
 Comment by:       dhdh at eie dot xcd
 Reported By:      toastyghost_ at hotmail dot com
 Status:           Bogus
 Bug Type:         Feature/Change Request
 Operating System: Red Hat
 PHP Version:      4.0.4pl1
 New Comment:

<A HREF="http://www.1st-art-gallery.com/home_gallery.htm>Oil Paintings
</A></FONT></SPAN><FONT SIZE="2"> main page<BR>


Previous Comments:
------------------------------------------------------------------------

[2004-06-22 20:31:36] nones at nddo dot com

http://www.1st-art-gallery.com/home_gallery.htm

<A HREF="http://www.1st-art-gallery.com/home_gallery.htm";>Oil Paintings
</A></FONT></SPAN><FONT SIZE="2"> main page<BR>

------------------------------------------------------------------------

[2001-03-15 10:49:32] [EMAIL PROTECTED]

this is configurable from php.ini, and described in there:

variables_order = "EGPCS"
; This directive describes the order in which PHP registers
; GET, POST, Cookie, Environment and Built-in variables (G, P,
; C, E & S respectively, often referred to as EGPCS or GPC).
; Registration is done from left to right, newer values override
; older values.

Also, consider turning register_globals off.

------------------------------------------------------------------------

[2001-03-15 10:09:27] toastyghost_ at hotmail dot com

/* this is a security measure that only permits the display of the page
if the referer is within the same domain as the page... if you run it
with HTTP_REFERER=HTTP_HOST or a string of the host url in the query
string or post a form input object called HTTP_REFERER with value of
host url, it produces the same effect as if you had clicked on a link
from within the site */

<?
  $referer = parse_url($HTTP_REFERER);

  if($referer[host]!='mydomain.com') die ('invalid host');
  else{echo '<html>this is my page!!</html>';
?>

------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=9767&edit=1

Reply via email to