Only that you have to explain me ?
goto to another list ..
pff

----- Original Message -----
From: <[EMAIL PROTECTED]>
To: "Vergoz Michael (SYSDOOR)" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Thursday, September 19, 2002 12:48 PM
Subject: Re: [PHP-DEV] and so... there is a security problem.


> Hey,
>
> this is the wrong list for these kinds of questions, try the
> [EMAIL PROTECTED] mailinglist instead.
>
> Derick
>
> On Thu, 19 Sep 2002, Vergoz Michael (SYSDOOR) wrote:
>
> > Hi list,
> >
> > i think that you have to return a _s64 per default, cuz for exemple i'm
using some identification coded on _s64 if i jump 21 474 836 47, intval()
will return to me a wrong number (normal) but i _can't_ know if that that
number is a valid _s64 (_s64) and there can have some big security problems
> >
> > Exemple:
> >
> > $id = intval($_GET['id']);
> > $query = "
> >     SELECT
> >         \"proute\"
> >     FORM
> >         \"polom\"
> >     WHERE
> >         id = $id
> > ";
> >
> > Best regards,
> > Vergoz Michael
> > SYSDOOR
> >
>
> --------------------------------------------------------------------------
-
>  Derick Rethans                                   http://derickrethans.nl/
>  JDI Media Solutions
> -----------------------------[ [EMAIL PROTECTED]: Databases are for
Assholes ]-
>
>
> --
> PHP Development Mailing List <http://www.php.net/>
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>


-- 
PHP Development Mailing List <http://www.php.net/>
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to