RE: [PHP-DEV] Security?

From:	Richard Heyes	Date:	Wed, 04 Jul 2001 13:30:16 +0000
Subject:	RE: [PHP-DEV] Security?
Groups:	php.dev php.doc
Request:	Send a blank email to php-dev+get-58879@lists.php.net to get a copy of this message

> > I also think that PHP5.0 since we are breaking 
> language compat,
> > perhaps we should turn off register_globals by default?  I 
> just see to
> > many chances for fscking up things big time when using that
> > functionality....
> 
> I still don't agree on this particular point.  All this does is limit
> where data can come from.

And also prevent namespace clashes, eg a GET/POST variable named the
same
as session variables. Turning register_globals off would probably
prevent
a lot of head scratching for peeps who've not come across this issue
before.

-- 
Richard Heyes


   

Thread (11 messages)

• sterling hughesWed, 04 Jul 2001 07:43:10 +0000
  • Rasmus LerdorfWed, 04 Jul 2001 02:13:20 +0000
    • sterling hughesWed, 04 Jul 2001 17:05:29 +0000
      • Rasmus LerdorfWed, 04 Jul 2001 13:07:57 +0000
      • Ron ChmaraSat, 07 Jul 2001 06:36:48 +0000
      • Andi GutmansSat, 07 Jul 2001 07:58:27 +0000
        • Joey SmithSat, 07 Jul 2001 10:17:23 +0000
        • Wez FurlongMon, 09 Jul 2001 10:33:10 +0000
          • derick@php.netMon, 09 Jul 2001 12:09:17 +0000
    • CynicWed, 04 Jul 2001 11:28:28 +0000
• Richard HeyesWed, 04 Jul 2001 13:30:16 +0000RE: [PHP-DEV] Security?