Doc #64058 [Csd]: Warn about register_globals
| From: | philip@php.net | Date: | Thu, 24 Jan 2013 16:47:14 +0000 |
| Subject: | Doc #64058 [Csd]: Warn about register_globals | ||
| References: | 1 | Groups: | php.doc.bugs |
| Request: | Send a blank email to doc-bugs+get-9469@lists.php.net to get a copy of this message | ||
Edit report at https://bugs.php.net/bug.php?id=64058&edit=1
ID: 64058
Updated by: philip@php.net
Reported by: ph57 at brisk dot org dot uk
Summary: Warn about register_globals
Status: Closed
Type: Documentation Problem
Package: Documentation problem
Operating System: n/r
PHP Version: 5.3.21
Assigned To: krakjoe
Block user comment: N
Private report: N
New Comment:
I thought we already mentioned this, or do somewhere else. Does someone else
remember? There are plenty of PHP 5.3 (and below) users out there. We document PHP
5.1 and above.
Previous Comments:
------------------------------------------------------------------------
[2013-01-24 13:45:17] ph57 at brisk dot org dot uk
It is a pity that, even when serious deficiencies are drawn to your attention, you arrogantly refuse
to correct them. The fact that register_globals is a deprecated feature is not relevant. The fact is
there is absolutely no mention of register_globals, or its appalling side-effects, in the SESSION
documentation. So it is possible for someone, like myself, to read the whole of the SESSION
documentation, and use it, whilst remaining completely ignorant of this underlying disaster.
I simply askled you to warn people. You refuse. That is a very bad decision. I won't bother to
try to help you improve in future. Goodbye.
------------------------------------------------------------------------
[2013-01-24 12:35:49] krakjoe@php.net
http://php.net/manual/en/ini.core.php#ini.register-globals
register_globals is a deprecated feature in the version of PHP you are reported
to be using. It is removed in the final release after it.
Therefore there is no need to include any more information than is included in
the manual page I have linked to.
------------------------------------------------------------------------
[2013-01-23 20:14:27] ph57 at brisk dot org dot uk
Description:
------------
---
From manual page: http://uk1.php.net/manual/en/session.examples.basic.php
---
Please can we have a very prominent WARNING, in the introduction to session, along the lines of:-
WARNING: if register_globals is set ON, then any key you use in $_SESSION will be a reference to a
global variable of the same name. This will cause your session vasriables to change unexpectedly if
you accidentally use a key that happens to match the name of an existing global variable.
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=64058&edit=1