Re: Security Issues

At 12:06 7/30/2001, Anil Madhavapeddy wrote the following: -------------------------------------------------------------- >Cynic wrote: >> > >> >Of course it is. $foo is conceptually simpler than $_GET["foo"]. >> >I don't see how you can say it isn't. >> >> $foo is conceptually a few keystrokes. That's all simplicity >> I can see. >> > >I think that's the whole point ... > >1) $foo >2) $_GET["foo"] > >One looks like PHP, the other looks like Perl :-) > >Anil ------end of quote------ I admit I don't know much of Perl, but my decision not to learn it was largely based on my perception that much things in Perl happen automagically (or just the language is too terse), making it hard to understand. I'm probably a strange type of guy for a PHP coder, but I like $HTTP_*_VARS arrays, and all the servers I use have register_globals = off, and error_reporting = E_ALL (with these switched to on and E_ALL &~ E_NOTICE in <Directory ...> sections where third-party code resides... I think I have yet to come across a class or application that's written "properly" (from MPOV). cynic@mail.cz ------------- And the eyes of them both were opened and they saw that their files were world readable and writable, so they chmoded 600 their files. - Book of Installation chapt 3 sec 7