News Feed
Jobs Feed
Sections




News Archive
Looking for more information on how to do PHP the right way? Check out PHP: The Right Way

Ivo Jansch's Blog:
How a PHP notice revealed a quirk of Norton Internet Security
April 05, 2006 @ 07:00:13

While hacking around on one of his recent PHP scripts, Ivo Jansch noticed something odd - a notice message that seemed to appear out of nowhere.

I thought 'Que?!', as I have not modified the code in class.atkoutput.inc in weeks, and certainly not tonight.

This code worked in all browsers, for years, without notices, because the HTTP_ACCEPT_ENCODING header is usually set for most major browsers.

He made a connection as to a probable cause - the error showed up when he had installed the Norton Internet Security software on his laptop. The firewall in this software was grabbing the header in the notice (the index for HTTP_ACCEPT_ENCODING in $_SERVER) and stripping it from the connection.

The (undocumented?) side effect is that with Norton Internet Security active, no page will be send gzipped. This is a performance penalty I think. They probably do it to be able to scan the text before it arrives in the browser (unzipping, scanning and rezipping would probably take too much time).

0 comments voice your opinion now!
norton internet security software strip header HTTP_ACCEPT_ENCODING norton internet security software strip header HTTP_ACCEPT_ENCODING


blog comments powered by Disqus

Similar Posts

O'Reilly: Using Google Code Search to Find Security Bugs

Zend Developer Zone: PHP Abstract Podcast Episode 20: Five Ways To Kill a Software Project

BlogSecurity.net: Interview with Stefan Esser on WordPress

Debuggable Blog: Finally - CakePHP 1.2 RC1 is out!

Zeev Suraski's Blog: PHP Security


Community Events











Don't see your event here?
Let us know!


framework application facebook release introduction component unittest podcast hhvm composer package install language security symfony2 series hack code performance opinion

All content copyright, 2014 PHPDeveloper.org :: info@phpdeveloper.org - Powered by the Solar PHP Framework