|
Posted by Rasmus Lerdorf on 01/17/05 07:54
On Sun, 16 Jan 2005, Gal wrote:
> I'm Working in organization which also using php on the Windows platform.
> Because of the security holes in the older version and a COM bug at PHP
> 4.3.10 (http://bugs.php.net/bug.php?id=31159) we are using a problematic
> version.
I'd just roll back to 4.3.9 and do proper input filtering. As long as you
don't pass raw user data to unserialize or do something like include
"$user_data/foo" while allowing $user_data to be huge, you are fine.
-Rasmus
Navigation:
[Reply to this message]
|