Re: register globals
| From: | Friedhelm Betz | Date: | Thu, 09 Sep 2004 20:41:53 +0000 |
| Subject: | Re: register globals | ||
| References: | 1 2 3 | Groups: | php.doc |
| Request: | Send a blank email to phpdoc+get-969363930@lists.php.net to get a copy of this message | ||
On Thursday 09 September 2004 20:20, messju mohr wrote:
> On Thu, Sep 09, 2004 at 06:19:41PM +0200, Friedhelm Betz wrote:
> > On Thursday 09 September 2004 12:59, Aidan Lister wrote:
> > > http://nopaste.php.cd/28881
> > >
> > > How's that for enabling/disabling at runtime. Anything I didn't think
> > > of?
> > >
> > > I want to add this under security.registerglobals for enable/disable at
> > > runtime
> >
> > I don't like the idea at all, to have such information in the manual :-(
> >
> > Friredhelm
>
> could you elaborate?
It's a nice kind of hack and I don't think we should provide hacks even if
they are nice. Not in security, please. imho.
Put it in the FAQ.
To turn it the other way round:
Why do you think this should be in the security chapter of the manual?
Just my 2c ;-)
Friedhelm
--
http://www.jungle-world.com/