Doc #64058 [Csd->ReO]: Warn about register_globals

Edit report at https://bugs.php.net/bug.php?id=64058&edit=1 ID: 64058 Updated by: krakjoe@php.net Reported by: ph57 at brisk dot org dot uk Summary: Warn about register_globals -Status: Closed +Status: Re-Opened Type: Documentation Problem Package: Documentation problem Operating System: n/r PHP Version: 5.3.21 Assigned To: krakjoe Block user comment: N Private report: N New Comment: Please accept my apologies, I am new to the doc team and did not realize we documented versions of PHP that are so old Previous Comments: ------------------------------------------------------------------------ [2013-01-25 07:37:41] krakjoe@php.net Automatic comment from SVN on behalf of krakjoe Revision: http://svn.php.net/viewvc/?view=revision&revision=329295 Log: in response to bug #64058, a warning is apparently appropriate ------------------------------------------------------------------------ [2013-01-24 19:20:18] ph57 at brisk dot org dot uk Actually it doesn't mention the linkage between $_SESSION keys and global variables anywhere in the SESSION documentation (although I think I did find a posting by someone somewhere in there that obliquely alerted me to the issue, but I don't think one should have to read all the postings which are often long or old). Yesterday I hadn't even heard of register_globals (why read about deprecated features?). Now I know what it is, having spent the whole of yesterday afternoon investigating why my session vars were changing under my feet. I wouldn't have made this mistake if there had been a mention of this issue in the SESSION documentation. ------------------------------------------------------------------------ [2013-01-24 16:47:14] philip@php.net I thought we already mentioned this, or do somewhere else. Does someone else remember? There are plenty of PHP 5.3 (and below) users out there. We document PHP 5.1 and above. ------------------------------------------------------------------------ [2013-01-24 13:45:17] ph57 at brisk dot org dot uk It is a pity that, even when serious deficiencies are drawn to your attention, you arrogantly refuse to correct them. The fact that register_globals is a deprecated feature is not relevant. The fact is there is absolutely no mention of register_globals, or its appalling side-effects, in the SESSION documentation. So it is possible for someone, like myself, to read the whole of the SESSION documentation, and use it, whilst remaining completely ignorant of this underlying disaster. I simply askled you to warn people. You refuse. That is a very bad decision. I won't bother to try to help you improve in future. Goodbye. ------------------------------------------------------------------------ [2013-01-24 12:35:49] krakjoe@php.net http://php.net/manual/en/ini.core.php#ini.register-globals register_globals is a deprecated feature in the version of PHP you are reported to be using. It is removed in the final release after it. Therefore there is no need to include any more information than is included in the manual page I have linked to. ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at https://bugs.php.net/bug.php?id=64058 -- Edit this bug report at https://bugs.php.net/bug.php?id=64058&edit=1