Re: Old version of PHP

On Friday, August 8, 2003, at 10:28 AM, Neil Davis wrote:

Fellas,

can't see how this should be an issue.

It is a security issue. Most ISP's don't allow register_globals to be turned on. Read the php docs about register_globals. Zeev and company explain it better than I can. http://www.php.net/register_globals

Please re-read what I wrote in context. I'm fully aware of the whole register_globals situation. Have read (and wrote) heaps on the topic. The OP was talking about RG issues when upgrading versions... In regards to upgrading, the fact that register_globals defaults to off, not on in newer versions should not be a deterent to upgrading, because the value can simply be edited in the php.ini file, changed via a htaccess file, etc etc. I was not AT ALL suggesting that turning on register_globals was a good idea... I was suggesting that the setting could be easily switched to match the value on other servers (on or off as required). Me? I code strictly for RG off, and have done so for ages, and force RG to be off regardless of my ISP's settings via a htaccess file. Cheers, Justin