Re: register_globals off or on, why on

> I'm working on a site where I'm using geeklog > http://geeklog.sourceforge.net/ > > It has the requirement that > > > "Geeklog needs the register_globals variable turned on in order to work. > > Since PHP 4.2.0, the default for register_globals is "off". To fix it, > > simply add the following line to your php.ini file > > Is this not *wrong*. It sounds to me like fake laziness. Nothing drives > me bonkers more than trying to track down a variable that is inherited > from who knows where. If you initialize all your local variables, there is nothing wrong with having register_globals on. Well-written apps run quite nicely and securely with them on. The reason to turn them off is to protect yourself from crappy code. -Rasmus