Re: Using register_globals
| From: | Bobby Patel | Date: | Wed, 04 Jun 2003 16:00:09 +0000 |
| Subject: | Re: Using register_globals | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-150203@lists.php.net to get a copy of this message | ||
If it's a preference it's a bad one. Have register globals set to ON is one
way of leaving your script open to being exploitable. I would suggest that
if you really need to use that code then either modify it or write something
from scratch and use that code as a guide line.
search php.net for register globals and the warnings associated with it.
Bobby
"Todd Cary" <todd@aristesoftware.com> wrote in message
news:3EDDF71B.4060907@aristesoftware.com...
> I have noticed that quite a few applications are designed with the
> assumption that "register_globals = Yes"; in other words, the
> application does not use $HTTP_xxx_VARS. In contrast, I always retrieve
> my vars.
>
> Is there a preference?
>
> Todd
> --
>
----------------------------------------------------------------------------
----
> I have noticed that quite a few applications are designed with the
assumption that "register_globals = Yes"; in other words, the application
does not use $HTTP_xxx_VARS. In contrast, I always retrieve my vars.
>
> Is there a preference?
>
> Todd
>
> --
>
>