Re: Removing track_vars?
| From: | Zeev Suraski | Date: | Tue, 05 Sep 2000 20:08:29 +0000 |
| Subject: | Re: Removing track_vars? | ||
| References: | 1 | Groups: | php.dev |
| Request: | Send a blank email to php-dev+get-32230@lists.php.net to get a copy of this message | ||
At 22:00 05/09/2000, André Langhorst wrote:
POST_RAW is still not protected at this time, but AFAIK, it's always on anyway (in case the mime type is not identified).I think that we should remove the track_vars option - and make PHP behave as if it's always on. Also, I want to change PHP so that it always defines the various $HTTP_*_VARS[] arrays, even if no data is submitted. I'd like to hear some feedback before actually going about doing this... Any comments?great idea, but 1) will it affect only the common ones, or POST_FILES, POST_RAW etc. too?
2) to preserve backwards compatibility, let the user decide by only creating that array in variables_order, he allowed, if he don´t want E+S and made a check if ($HTTP_SERVER_VARS), this will resolve to if (TRUE), if $HTTP_SERVER_VARS=array();I didn't understand your example and reasoning; I'm against that in general, they should be very 'sound' variables, that are always available. If they're empty - they'll be an empty array (which evaluates to false, FWIW). Zeev -- Zeev Suraski <zeev@zend.com> http://www.zend.com/