Using register_globals=on with $_SESSION['var']?
| From: | Andre Dubuc | Date: | Sat, 03 May 2003 02:20:09 +0000 |
| Subject: | Using register_globals=on with $_SESSION['var']? | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-146225@lists.php.net to get a copy of this message | ||
Hi,
I designed my site with register_globals="off" and used $_POST['var'] or
$_SESSION['var'] throughout. However, I am thinking of switching my IP, and
the new IP has register_globals set to 'on'.
My question: what security issues should I be concerned about if I left it the
way it is, and use $_POST['var'] or $_SESSION['var'] throughout with
register_globals="on"?
I would greatly apprciate any input, advice, or warnings about my proposed
course of action.
Tia,
Andre