diff --git a/chapters/security.xml b/chapters/security.xml index a7b6556026..870f7c5ed1 100644 --- a/chapters/security.xml +++ b/chapters/security.xml @@ -1,5 +1,5 @@ - + Security @@ -1055,8 +1055,8 @@ if (authenticated_user()) { $authorized = true; } -// Because we didn't first initialize $authenticated as false, this might be -// defined through register_globals, like from GET auth.php?authenticated=1 +// Because we didn't first initialize $authorized as false, this might be +// defined through register_globals, like from GET auth.php?authorized=1 // So, anyone can be seen as authenticated! if ($authorized) { include "/highly/sensitive/data.php"; diff --git a/security/index.xml b/security/index.xml index a7b6556026..870f7c5ed1 100644 --- a/security/index.xml +++ b/security/index.xml @@ -1,5 +1,5 @@ - + Security @@ -1055,8 +1055,8 @@ if (authenticated_user()) { $authorized = true; } -// Because we didn't first initialize $authenticated as false, this might be -// defined through register_globals, like from GET auth.php?authenticated=1 +// Because we didn't first initialize $authorized as false, this might be +// defined through register_globals, like from GET auth.php?authorized=1 // So, anyone can be seen as authenticated! if ($authorized) { include "/highly/sensitive/data.php";