3 ms·
If you may, could you point out what are the TOCTOU bugs you have mentioned?
by keen_poincare 3y ago
If you may, could you point out what are the TOCTOU bugs you have mentioned?
- VWWHFSfQ 3y agoEverything between checking if the user can "place-order", and then validating the inputs, and then finally creating the order.
- keen_poincare 3y agoI don't think the request object can be modified by the end user or that it is modified by the server at that point. If my belief is correct, does this code still contain TOCTOU bugs?
- VWWHFSfQ 3y agoIt's the underlying state of the database that will change between these different checks. Not the end-user modifying the request object, which is in PHP memory
- keen_poincare 3y agoThanks for explaining it.