Bug #16308: unregister_globals() - a function that removes all vars by "register_globals"

From: tapken@engter.de Operating system: Linux 2.4 PHP version: 4.1.2 PHP Bug Type: Feature/Change Request Bug description: unregister_globals() - a function that removes all vars by "register_globals" Hi all! The new globals vars ($_GET, $_POST, etc) are very nice but they do not bring more security if register_globals = on. Regrettably, many server admins are unable to set "register_globals = off" due to the fact that many scripts would broke. I would like to see a 'unregister_globals()'-Function (called at the beginning of a script) which parses the gpc-vars and unsets all normal vars with the same name (let's say it undoes register_globals' work). It would be nice if somebody would inform me if he has such a patch. bye, Roland -- Edit bug report at http://bugs.php.net/?id=16308&edit=1 -- Fixed in CVS: http://bugs.php.net/fix.php?id=16308&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=16308&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=16308&r=needtrace Try newer version: http://bugs.php.net/fix.php?id=16308&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=16308&r=support Expected behavior: http://bugs.php.net/fix.php?id=16308&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=16308&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=16308&r=submittedtwice