#22389 [Opn->Bgs]: $_POST vars overwrites $_SESSION vars, if register_globals=on
| From: | sniper@php.net | Date: | Mon, 24 Feb 2003 10:07:28 +0000 |
| Subject: | #22389 [Opn->Bgs]: $_POST vars overwrites $_SESSION vars, if register_globals=on | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-34064@lists.php.net to get a copy of this message | ||
ID: 22389
Updated by: sniper@php.net
Reported By: ng4rrjanbiah at rediffmail dot com
-Status: Open
+Status: Bogus
Bug Type: Session related
Operating System: Linux
PHP Version: 4.3.0
New Comment:
Yes, don't use register_globals=On. Doing $_SESSION['foo'] is basically
same as doing session_register('foo'); and when register_globals=On,
$foo in global context will be same as in $_SESSION['foo']. Not a bug.
Previous Comments:
------------------------------------------------------------------------
[2003-02-24 04:03:45] ng4rrjanbiah at rediffmail dot com
For me,
register_globals = on;
$_SESSION['foo'] = 'xxx';
...Then form operations that post few data including
$_POST['foo']='yyy'
...Now the value of $_SESSION['foo'] is set to 'yyy'
My server's PHP version is 4.3.0...The above bug is really a big
problem for me...I've developed a part of the module for our big
project...I've developed with the idea of register_globals=off, but
other people develped with the idea of register_globals=on...And in the
server, they've put it with register_globals=on... and I've started
experiencing the above problem...
It worked fine on my local system (PHP4.2.3) with
register_globals=off.
As, the module is related to login & session, it is a very big problem
for me. Any workaround?
-R. Rajesh Jeba Anbiah
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=22389&edit=1