RE: [PHP] register_globals On
| From: | Johnson, Kirk | Date: | Tue, 18 Feb 2003 16:07:13 +0000 |
| Subject: | RE: [PHP] register_globals On | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-136030@lists.php.net to get a copy of this message | ||
> I'm thinking of running a shopping cart package (osCommerce)
> that requires
> register_globals to be enabled. With all the warnings about
> security with
> register_globals enabled I'm worried.
>
> How dangerous is it?
The key defensive step is to initialize all of your session variables at the
time you create them, like so:
$isAdmin = '';
session_register('isAdmin');
PHP will do the rest ;)
Kirk