RE: [PHP] Re: register_globals On
| From: | Johnson, Kirk | Date: | Thu, 20 Feb 2003 16:38:07 +0000 |
| Subject: | RE: [PHP] Re: register_globals On | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-136382@lists.php.net to get a copy of this message | ||
> -----Original Message-----
> An alternative...
>
> 1. register_globals off
>
> use the command
> import_request_variables("PC","_p");
> now you can get the variables like user as $p_user.
> The get variables will be ignored!
>
> Still, If a user developes a special browser, exclusively to
> hack, he may be
> able to send post variables...
Anybody, anywhere in the world, can send any data they want (POST, GET,
COOKIE) to your scripts. They key is to grab only the data you are expecting
to receive.
Kirk