Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:10850
Return-Path: <cshmoove@hotmail.com>
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Delivered-To: mailing list internals@lists.php.net
Received: (qmail 77810 invoked by uid 1010); 30 Jun 2004 17:45:55 -0000
Delivered-To: ezmlm-scan-internals@lists.php.net
Delivered-To: ezmlm-internals@lists.php.net
Received: (qmail 77769 invoked by uid 1007); 30 Jun 2004 17:45:55 -0000
Message-ID: <20040630174555.77752.qmail@pb1.pair.com>
To: internals@lists.php.net
Reply-To: "l0t3k" <cshmoove@hotmail.com>
References: <20040630190623.F0AE.PHP@ter.dk>
Date: Wed, 30 Jun 2004 13:45:50 -0400
Lines: 9
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2800.1409
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409
X-Posted-By: 69.15.15.204
Subject: Re: A couple of potential security issues with sessions and glob() in safe_mode
From: cshmoove@hotmail.com ("l0t3k")

Peter,
   although he hangs out here from time to time, you may want to forward
this to Stefan Esser of  HardenedPHP

http://www.hardened-php.net/

l0t3k