1
I am working on the security of my site and would like to know if a malicious user can override some php function of my site if by chance he finds out what the name of this function?
1
I am working on the security of my site and would like to know if a malicious user can override some php function of my site if by chance he finds out what the name of this function?
Browser other questions tagged php function superscript
You are not signed in. Login or sign up in order to post.
There are very rare cases that this can happen. I wrote an example, from a look: https://ideone.com/IcHcqz
– Francisco
depends if he has access to your server it is obvious that yes, and can also subscribe using shellinjection
– 13dev
Only if you’re wearing something like
eval($_GET['xyz']);
and the functions are "Anonimas" (closure) in variables. There is no way the user can directly access what is running time in your back-end scripts unless you create this gap.– Guilherme Nascimento