PHP urges users to disable session upload progress feature amid security flaw
PHP advised users on October 23 to temporarily turn off its session upload progress feature until the next scheduled bugfix release. The notice came after an earlier October 21 advisory addressing a related vulnerability. The newly flagged issue only creates exposure when particular session settings are altered during runtime and the feature is still switched on. Anyone who has already deactivated the feature is not required to take further steps.
This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)
Log in to join the discussion and vote.
Log in