Variable coverage of PHP code audits

(i) Parse_str ()-parses a string into a variable

<? PHP $a= "; Parse_str ($_server//$_server[' query_string ') Save the query portion of the URL print$a;? >

A=1 can complete the overlay.

(ii) Extract ()-Import variables from an array

<? PHP $a = "; Extract ($_get); Print $a ;? >

A=1 can complete the overlay.

(iii) Import_request_variables ()-Import the Get/post/cookie variable into the global scope >php 4.1.0 <php 5.4.0

<?php      //>php4.1.0 <php5.4.0$a = ' 0 '; Import_request_variables (' G '); Print $a ;  ? >  

Within the corresponding version? A=1 can be overwritten

(Thu) Register_globals=on <php 5.3

? a=1 can be overridden directly--initialize variables to avoid this problem

Variable coverage of PHP code audits