Author Topic: Possible security hazard?  (Read 1914 times)

dynaweb

  • <b>Canine Deamon</b>
  • Administrator
  • Sr. Member
  • *****
  • Posts: 483
  • Karma: +10/-0
  • Generic personal text here ...
    • MSN Messenger - danno_d_manno@yahoo.com
    • View Profile
    • DynaWeb Designs
    • Email
Possible security hazard?
« on: September 04, 2007, 09:29:41 AM »
Got a really strange error today.  I was working on a web form and changed a form NAME value to a random number using php rand() and upon submitting the form I get this:
 
Warning: import_request_variables() [function.import-request-variables]: Numeric key detected - possible security hazard. in [path] on line [number]
Those who cannot learn from history are doomed to repeat it. -- Linux learns.

ctwjr

  • Super Moderator
  • Jr. Member
  • **
  • Posts: 72
  • Karma: +10/-0
    • View Profile
    • http://www.ftplive.com
    • Email
Possible security hazard?
« Reply #1 on: September 04, 2007, 09:40:22 AM »
I believe this is a security feature built in to PHP.  PHP recognizes that it is being fed random numbers through a form field and suspects it as a hacking attempt and prevents it.  I am not sure how to workaround that.

 

Related Topics

  Subject / Started by Replies Last post
0 Replies
136 Views
Last post September 02, 2005, 04:27:31 AM
by Linux News
0 Replies
126 Views
Last post September 22, 2005, 05:33:39 AM
by Linux News
1 Replies
940 Views
Last post December 06, 2005, 08:30:09 AM
by dynaweb
1 Replies
962 Views
Last post December 12, 2005, 01:43:52 PM
by zelo