1--TEST-- 2Bug #72681: PHP Session Data Injection Vulnerability 3--SKIPIF-- 4<?php include('skipif.inc'); ?> 5--FILE-- 6<?php 7ini_set('session.serialize_handler', 'php'); 8session_start(); 9$GLOBALS['ryat'] = $GLOBALS; 10$_SESSION['ryat'] = 'ryat|O:8:"stdClass":0:{}'; 11session_write_close(); 12session_start(); 13var_dump($_SESSION); 14?> 15--EXPECT-- 16array(0) { 17} 18
