summaryrefslogtreecommitdiff
path: root/doc
diff options
context:
space:
mode:
authortomcodes2019-01-22 23:30:00 +0100
committerjvoisin2019-01-22 22:30:00 +0000
commit6a3f2ecbc1ae60e533f75563b39a6b035b3cc93f (patch)
treef1b9a32c2fcb0efd91ecca8f6a7942341cb573e7 /doc
parent73dec8383e517a251ffe1f0c51d65627b281519d (diff)
Fix typos and suggest more broad term for sysadmins
Diffstat (limited to 'doc')
-rw-r--r--doc/source/features.rst6
1 files changed, 3 insertions, 3 deletions
diff --git a/doc/source/features.rst b/doc/source/features.rst
index e3ae876..407b9c7 100644
--- a/doc/source/features.rst
+++ b/doc/source/features.rst
@@ -309,7 +309,7 @@ be raised if the types aren't matching.
309are optional, but you don't have to use them in your code to benefit from them, 309are optional, but you don't have to use them in your code to benefit from them,
310since every internal function from php has them. 310since every internal function from php has them.
311 311
312This option provide a switch to globally activate this strict mode, 312This option provides a switch to globally activate this strict mode,
313helping to uncover vulnerabilities like the classical 313helping to uncover vulnerabilities like the classical
314`strcmp bypass <https://danuxx.blogspot.fr/2013/03/unauthorized-access-bypassing-php-strcmp.html>`_ 314`strcmp bypass <https://danuxx.blogspot.fr/2013/03/unauthorized-access-bypassing-php-strcmp.html>`_
315and various other types mismatch. 315and various other types mismatch.
@@ -384,10 +384,10 @@ besides templating and building mathematical expressions based on user input,
384it's broadly (mis)used all around the web. 384it's broadly (mis)used all around the web.
385 385
386Snuffleupagus provides a white and blacklist mechanism, to explicitly allow 386Snuffleupagus provides a white and blacklist mechanism, to explicitly allow
387and forbid specific functions call from being issued inside ``eval``. 387and forbid specific function calls from being issued inside ``eval``.
388 388
389While it's heavily recommended to only use the whitelist feature, the blacklist 389While it's heavily recommended to only use the whitelist feature, the blacklist
390one exists because some adminsys might want to use it to catch automated 390one exists because some sysadmins might want to use it to catch automated
391script-kiddies attacks, while being confident that doing so won't break a 391script-kiddies attacks, while being confident that doing so won't break a
392single website. 392single website.
393 393