RE: [PHP] help create community newbie guide to security
| From: | Chris Shiflett | Date: | Thu, 13 Nov 2003 15:09:57 +0000 |
| Subject: | RE: [PHP] help create community newbie guide to security | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-169507@lists.php.net to get a copy of this message | ||
--- Jay Blanchard <jay.blanchard@niicommunications.com> wrote:
> [snip]
> If you code properly, you could get away with turning register_globals
> on, but this requires you to be very careful when thinking about the
> logic of your code.
> [/snip]
>
> I really do hate to see the misconception about register globals
> continue.
I'm not sure why you consider this a misconception, since the guy that
posted that is correct. If you want to make such a claim, you should show
some code where it is impossible for a developer to reach the same level
of security with register_globals enabled.
Chris
=====
My Blog
http://shiflett.org/
HTTP Developer's Handbook
http://httphandbook.org/
RAMP Training Courses
http://www.nyphp.org/ramp