Skip to content

Conversation

@lazyeugene
Copy link

$_COOKIE has precedence over $_POST when $_REQUEST gets constructed,
so if flash uploader sends a bad PHPSESSID cookie, the bad
$_COOKIE['PHPSESSID'] was present in $_REQUEST, not the correct
$_POST['PHPSESSID']. Changing $_REQUEST to $_POST in _config.php
fixes this problem.

lazyeugene added 3 commits January 14, 2013 23:24
$_COOKIE has precedence over $_POST in $_REQUEST, so if flash uploader
send a bad cookie it still was presented in $_REQUEST. Change
$_REQUEST to $_POST fix this problem.
$_COOKIE has precedence over $_POST when $_REQUEST gets constructed,
so if flash uploader sends a bad PHPSESSID cookie, the bad
$_COOKIE['PHPSESSID'] was present in $_REQUEST, not the correct
$_POST['PHPSESSID']. Changing $_REQUEST to $_POST in _config.php
fixes this problem.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant