Re: Security Issues

From: Date: Mon, 30 Jul 2001 08:00:58 +0000
Subject: Re: Security Issues
References: 1 2 3 4  Groups: php.dev 
Request: Send a blank email to php-dev+get-61439@lists.php.net to get a copy of this message
UNSUBSCRIBE ME PLEASE!!!!!!!!!!!!!! Andi Gutmans schrieb: > Hey, > > I thought of an idea yesterday which could make everyone happy. In the > default php.ini we set the register_globals to a new value "unset". If PHP > runs with this INI value it will display a page telling you that you need > to define the register_globals option in your php.ini and explains the > pros/cons & security concerns involved (IMO we should recommend > register_globals=off). This way we won't break existing sites which already > have php.ini and we have an easy way to feed new users w/ the required > information. > Of course, I still think we should think of a nicer way to access form > variables such as $_FORM[] in order to make it easier for the developer. > > Andi > > -- > PHP Development Mailing List <http://www.php.net/> > To unsubscribe, e-mail: php-dev-unsubscribe@lists.php.net > For additional commands, e-mail: php-dev-help@lists.php.net > To contact the list administrators, e-mail: php-list-admin@lists.php.net

« previous php.dev (#61439) next »