Re: BUG: variables from the query string are not accessible in script
| From: | Wez Furlong | Date: | Thu, 11 Apr 2002 02:23:57 +0000 |
| Subject: | Re: BUG: variables from the query string are not accessible in script | ||
| References: | 1 | Groups: | php.dev |
| Request: | Send a blank email to php-dev+get-82541@lists.php.net to get a copy of this message | ||
On 11/04/02, "Aaron Bannert" <aaron@apache.org> wrote:
> On Thu, Apr 11, 2002 at 02:20:00AM +0100, Wez Furlong wrote:
> > the php configuration directive register_globals defaults to off
> > in PHP 4.2; are you sure it's not just due to misconfiguration?
> Yeah, that was the problem.
>
> I'm sure I could go look back in the logs for why this change
> occured, but the part of me that spent *way* too long on this
> has to ask: Why did this change? Doesn't this violate the
> Principle of Least Astonishment?
For reasons of security (register_globals encourages less secure
PHP scripts).
The change is mentioned in NEWS, but having said that, it bit
me fairly recently too...
--Wez.