Re: cvs: php4 / configure.in
| From: | Sascha Schumann | Date: | Thu, 02 May 2002 13:57:37 +0000 |
| Subject: | Re: cvs: php4 / configure.in | ||
| Groups: | php.cvs | ||
| Request: | Send a blank email to php-cvs+get-11630@lists.php.net to get a copy of this message | ||
The comment in itself is not bogus, because that would
presume that it is impossible to write secure software with
register_globals on (which is not the case).
As I've already replied in private email to Derick, I would
not object to add a reference to the security impact the
option has under some circumstances.
- Sascha Experience IRCG
http://schumann.cx/ http://schumann.cx/ircg