Re: register globals
| From: | messju mohr | Date: | Fri, 10 Sep 2004 07:44:06 +0000 |
| Subject: | Re: register globals | ||
| References: | 1 2 3 4 | Groups: | php.doc |
| Request: | Send a blank email to phpdoc+get-969363940@lists.php.net to get a copy of this message | ||
On Thu, Sep 09, 2004 at 10:41:53PM +0200, Friedhelm Betz wrote:
> On Thursday 09 September 2004 20:20, messju mohr wrote:
> > On Thu, Sep 09, 2004 at 06:19:41PM +0200, Friedhelm Betz wrote:
> > > On Thursday 09 September 2004 12:59, Aidan Lister wrote:
> > > > http://nopaste.php.cd/28881
> > > >
> > > > How's that for enabling/disabling at runtime. Anything I didn't think
> > > > of?
> > > >
> > > > I want to add this under security.registerglobals for enable/disable at
> > > > runtime
> > >
> > > I don't like the idea at all, to have such information in the manual :-(
> > >
> > > Friredhelm
> >
> > could you elaborate?
>
> It's a nice kind of hack and I don't think we should provide hacks even if
> they are nice. Not in security, please. imho.
>
> Put it in the FAQ.
>
> To turn it the other way round:
> Why do you think this should be in the security chapter of the manual?
i don't care if the chapter is called "security", "faq" or "foo".
just
make it, that people find it when they look for it.
>
> Just my 2c ;-)
>
> Friedhelm