SitePoint Sponsor

User Tag List

Results 1 to 5 of 5
  1. #1
    SitePoint Wizard silver trophybronze trophy Cups's Avatar
    Join Date
    Oct 2006
    Location
    France, deep rural.
    Posts
    6,869
    Mentioned
    17 Post(s)
    Tagged
    1 Thread(s)

    $_ENV globals - can they be trusted?

    Says it all really, do I have to interrogate and frisk $_ENV variables as I do GET/POST/SERVER - can ENV be tampered with - what about in a shared hosted environment vs dedicated?

    Cheers all.

  2. #2
    SitePoint Wizard silver trophy kyberfabrikken's Avatar
    Join Date
    Jun 2004
    Location
    Copenhagen, Denmark
    Posts
    6,157
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    $_ENV is a mix of several sources -- Some can be trusted, some can't.

  3. #3
    SitePoint Wizard silver trophybronze trophy Cups's Avatar
    Join Date
    Oct 2006
    Location
    France, deep rural.
    Posts
    6,869
    Mentioned
    17 Post(s)
    Tagged
    1 Thread(s)
    That'll be a no then. Thanks a lot.

  4. #4
    SitePoint Wizard silver trophy kyberfabrikken's Avatar
    Join Date
    Jun 2004
    Location
    Copenhagen, Denmark
    Posts
    6,157
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    It's definitely a lot more secure than user-supplied data, since you would need access to the shell, under some sort, to change environment variables. I'm not 100% sure about the implications here, but I would presume that you can't trust it on shared hosts, while you can trust it to some degree on a dedicated server. Still -- being paranoid is a good thing, when it comes to programming.

  5. #5
    SitePoint Wizard silver trophybronze trophy Cups's Avatar
    Join Date
    Oct 2006
    Location
    France, deep rural.
    Posts
    6,869
    Mentioned
    17 Post(s)
    Tagged
    1 Thread(s)
    Quote Originally Posted by kyberfabrikken View Post
    Still -- being paranoid is a good thing, when it comes to programming.
    Honestly, I think loads of people have been saying that behind my back too.


Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •