Re: Re: Help?

From: Date: Tue, 22 Jul 2003 07:22:46 +0000
Subject: Re: Re: Help?
References: 1 2 3  Groups: php.general 
Request: Send a blank email to php-general+get-156185@lists.php.net to get a copy of this message
"Curt Zirzow" <curt@zirzow.dyndns.org> wrote in message news:20030721203247.GH50131@bagend.shire... > * Thus wrote Ivo Fokkema (I.F.A.C.Fokkema@LUMC.nl): > > I want to warn you though, PHP depricates the use of register_globals = On, > > so it would be recommendable to use your modified script and keep coding > > using $_POST, $_GET and these kind of global variables. > So php is removing that feature? Don't know about the future, but its default is off since 4.2.0 because of security issues that might arise from bad coding. An example on this is on http://www.php.net/manual/en/security.registerglobals.php. If it wasn't such a drag for many people to change all of their coding, I'd say it would be a good idea to just disable it for security issues. When I realised I really needed to use the $_POST, $_GET and $_SESSION arrays, I became more aware of the possible security holes of my scripts. It helped me a lot, I'd say. Ivo

« previous php.general (#156185) next »