Re: Re: PHP does not work??
| From: | Richard Lynch | Date: | Tue, 02 Jul 2002 23:55:26 +0000 |
| Subject: | Re: Re: PHP does not work?? | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-105094@lists.php.net to get a copy of this message | ||
>I forgot to point out another disadvantage of turning on register_globals
>apart from that of security is that when you are sending a page with a
>form to the same page, e.g:
>
><form name=whatever action=$PHP_SELF method=post>
>
>there is a tendency to lose info.. E.g.
>If you are sending text separated by spaces you only manage to
>send the first word this can be overcome by using the
>htmlspecialchars('value') method to evaluate value...
>
>turning on globals is to make the coding easier but has a
>good deal of disadvantages...
register_globals on or off is completely irrelevant to using urlencode (GET)
or htmlentities (POST) to send properly formatted strings to the browser.
If you want to delude yourself the register_globals off significantly
increases security, go ahead, but don't claim that it somehow "fixes"
badly-encoded HTML. It doesn't.
--
Like Music? http://l-i-e.com/artists.htm