RE: [PHP-DB] Register Globals Question

From: Date: Mon, 30 Sep 2002 22:41:13 +0000
Subject: RE: [PHP-DB] Register Globals Question
References: 1  Groups: php.db 
Request: Send a blank email to php-db+get-22107@lists.php.net to get a copy of this message
It is deprecated as it creates a massive security hole. However, all you have to do is change the setting in your php.ini file. Set register_globals=On. That's all. However, for all code you write from now on you should use $_POST, $_GET and the like. Read this article. http://www.zend.com/zend/art/art-sweat4.php ~ Matthew -----Original Message----- From: Ryan Jameson (USA) [mailto:RJameson@usa.ibs.org] Sent: Monday, September 30, 2002 6:34 PM To: php-db@lists.php.net Subject: [PHP-DB] Register Globals Question I was recently told this: "register_globals is a deprecated function due to security problems. It will NOT be available in the next version of PHP. As a result, the recommended way to access is with $_REQUEST["HTTP_USER_AGENT"] instead." This is a joke right? I've got thousands of lines of code that rely on the availability of $HTTP_USER_AGENT. I've been doing it that way since 1998... It's not like the PHP guys to release new versions that are incompatible with the old ones. Please tell me this is not for real. <>< Ryan -- PHP Database Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

« previous php.db (#22107) next »