RE: [PHP] Re: Using register_globals
| From: | (Edward Peloke) | Date: | Wed, 04 Jun 2003 20:24:43 +0000 |
| Subject: | RE: [PHP] Re: Using register_globals | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-150254@lists.php.net to get a copy of this message | ||
unfortunately, it might just require someone starting at page 1, finding all
the forms and the variables they pass, then find the pages they pass the
variables to and changing them to the $HTTP_ method...may have to do it a
form at a time....
-----Original Message-----
From: Tony Crockford [mailto:tonyc@boldfish.co.uk]
Sent: Wednesday, June 04, 2003 4:13 PM
To: Php-General@Lists. Php. Net
Subject: RE: [PHP] Re: Using register_globals
On this topic, could anyone point me to a good tutorial on how to
convert from sloppy code that assumes register_globals is on to good,
secure code that assumes register_globals is off.
something that covers what to look for and what to change it to would be
a great help.
I've been learning by working with someone else's (we bought it) code
and it won't run with register_globals off and I'd like it too.
it makes use of sessions (an area I'm still struggling with) and passes
a lot of variables from form to form, sometimes with post and sometimes
with get.
any suggestions would be much appreciated.
I looked at the manual and googled a lot, but can't find a plain english
guide to doing it right!
Thanks
Tony
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php