Re: Security Issues
| From: | Ramsi Sras | Date: | Mon, 30 Jul 2001 08:00:58 +0000 |
| Subject: | Re: Security Issues | ||
| References: | 1 2 3 4 | Groups: | php.dev |
| Request: | Send a blank email to php-dev+get-61439@lists.php.net to get a copy of this message | ||
UNSUBSCRIBE ME PLEASE!!!!!!!!!!!!!!
Andi Gutmans schrieb:
> Hey,
>
> I thought of an idea yesterday which could make everyone happy. In the
> default php.ini we set the register_globals to a new value "unset". If PHP
> runs with this INI value it will display a page telling you that you need
> to define the register_globals option in your php.ini and explains the
> pros/cons & security concerns involved (IMO we should recommend
> register_globals=off). This way we won't break existing sites which already
> have php.ini and we have an easy way to feed new users w/ the required
> information.
> Of course, I still think we should think of a nicer way to access form
> variables such as $_FORM[] in order to make it easier for the developer.
>
> Andi
>
> --
> PHP Development Mailing List <http://www.php.net/>
> To unsubscribe, e-mail: php-dev-unsubscribe@lists.php.net
> For additional commands, e-mail: php-dev-help@lists.php.net
> To contact the list administrators, e-mail: php-list-admin@lists.php.net