Re: Variables don't pass... *sniff*
| From: | daniel at rhesusb dot dk | Date: | Wed, 28 May 2003 14:30:17 +0000 |
| Subject: | Re: Variables don't pass... *sniff* | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-149249@lists.php.net to get a copy of this message | ||
> However, both of these "solutions" create the same security issue that
> turning RegisterGlobals on took care of in the first place. :)
Howcome? I don't think I understand that... Is the security issue not with
the fact that you're POSTing og GETing variables rather than the way you do
it? Would extract()'ing them with an include script not have the exact same
(lack of) security as doing $_POST[myVar] in the script?