Re: Register Globals Query
| From: | Justin French | Date: | Wed, 30 Apr 2003 10:40:13 +0000 |
| Subject: | Re: Register Globals Query | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-145761@lists.php.net to get a copy of this message | ||
on 30/04/03 10:09 PM, caspar kennerdale (caspar@thetuckshop.com) wrote:
> the dilemma really is, how far to go down this path,
>
> whilst is is the more secure to have register globals turned off and forces
> a stricter programming style, very few isp's have turned it off themselves
> (or havent upgraded). if mainitaining your own server fine, but when
> maintaining on behalf of clients then the ball is in the isp court!
You can force register_globals to OFF via a .htaccess file in the top of
your document root.
IMHO, any host that has RG on by default, or hasn't upgraded to PHP 4.1.0 or
greater (when super global arrays came in) is a little behind the 8-ball...
and any who don't allow you to use .htaccess files to impose your own
[tighter] 'security' should be dropped.
Justin