#22389 [Opn->Bgs]: $_POST vars overwrites $_SESSION vars, if register_globals=on

From: Date: Mon, 24 Feb 2003 10:07:28 +0000
Subject: #22389 [Opn->Bgs]: $_POST vars overwrites $_SESSION vars, if register_globals=on
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-34064@lists.php.net to get a copy of this message
ID: 22389 Updated by: sniper@php.net Reported By: ng4rrjanbiah at rediffmail dot com -Status: Open +Status: Bogus Bug Type: Session related Operating System: Linux PHP Version: 4.3.0 New Comment: Yes, don't use register_globals=On. Doing $_SESSION['foo'] is basically same as doing session_register('foo'); and when register_globals=On, $foo in global context will be same as in $_SESSION['foo']. Not a bug. Previous Comments: ------------------------------------------------------------------------ [2003-02-24 04:03:45] ng4rrjanbiah at rediffmail dot com For me, register_globals = on; $_SESSION['foo'] = 'xxx'; ...Then form operations that post few data including $_POST['foo']='yyy' ...Now the value of $_SESSION['foo'] is set to 'yyy' My server's PHP version is 4.3.0...The above bug is really a big problem for me...I've developed a part of the module for our big project...I've developed with the idea of register_globals=off, but other people develped with the idea of register_globals=on...And in the server, they've put it with register_globals=on... and I've started experiencing the above problem... It worked fine on my local system (PHP4.2.3) with register_globals=off. As, the module is related to login & session, it is a very big problem for me. Any workaround? -R. Rajesh Jeba Anbiah ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=22389&edit=1

« previous php.bugs (#34064) next »