Re: register globals
| From: | Philip Olson | Date: | Thu, 09 Sep 2004 21:38:18 +0000 |
| Subject: | Re: register globals | ||
| References: | 1 | Groups: | php.doc |
| Request: | Send a blank email to phpdoc+get-969363931@lists.php.net to get a copy of this message | ||
> > > > I want to add this under security.registerglobals for enable/disable at
> > > > runtime
> > >
> > > I don't like the idea at all, to have such information in the manual :-(
> > >
> > > Friredhelm
> >
> > could you elaborate?
>
> It's a nice kind of hack and I don't think we should provide hacks even if
> they are nice. Not in security, please. imho.
>
> Put it in the FAQ.
>
> To turn it the other way round:
> Why do you think this should be in the security chapter of the manual?
So once we come up with a working solution for doing this, it will be
written as a FAQ and security.registerglobals will link to this FAQ.
Sounds like a good idea to me.
Why this information should be there is because it's where people go to
read about register_globals, and where user comments keep on being added
for this topic. No more!
Regards,
Philip