RE: [PHP] register_globals & security
| From: | Jay Blanchard | Date: | Thu, 13 Nov 2003 13:31:43 +0000 |
| Subject: | RE: [PHP] register_globals & security | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-169483@lists.php.net to get a copy of this message | ||
[snip]
There is also a $_REQUEST variable.
At the risk of starting another flame war: IMHO switching off register
globals and relying on $_POST etc can lull you into a false sense of
security.
[/snip]
***applause***
Bottom-line....as I just said in another thread....initialize your
variables and validate them when you get them from 'outside' sources