Re: Re: cvs: php4 / configure.in

At 16:57 02/05/2002, Sascha Schumann wrote:

    The comment in itself is not bogus, because that would
    presume that it is impossible to write secure software with
    register_globals on (which is not the case).

From a security point of view, it's bogus. Of course it's possible to write secure code with register_globals on, just as it's possible to run a machine outside of a firewall and make it perfectly secure. In both cases, telling people to do that without warning them of the consequences is a bad idea, IMHO... Anyway, I updated the comment to both give a big heads-up to people, and warn them of the implications... Zeev