Re: Session variables not unsetting
| From: | steve | Date: | Mon, 06 Dec 2004 14:50:55 +0000 |
| Subject: | Re: Session variables not unsetting | ||
| References: | 1 2 3 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-203588@lists.php.net to get a copy of this message | ||
Peter Lauri wrote:
> Security?
>
> Have you called session_start(); ???
Yeah - as I mentioned in the original post, all my pages start with that.
I'm a little PO'd about the change to register_globals on. Alas, trying to
switch it off in an .htaccess file causes a 500 error. That said, I never
use variables passed by $_POST or $_GET without validating and all
variables on the page are always initialised so I'm hoping the security
exposure is minimal.
--
@+
Steve