Re: Re: Session variables not unsetting
| From: | steve | Date: | Mon, 06 Dec 2004 16:28:33 +0000 |
| Subject: | Re: Re: Session variables not unsetting | ||
| References: | 1 2 3 4 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-203607@lists.php.net to get a copy of this message | ||
Jason Wong wrote:
> With register_globals enabled, the problem is not with the $_POST, $_GET
> etc variables (although yes you should always validate data when they come
> from untrusted sources). The problem is that malicious users can pollute
> your namespace and if you do not initialise variables properly before
> using them your application can be compromised.
As I mentioned, I always initialise variables. I'm no programmer, but it
just makes sense to me that if a variable exists, it should have some sort
of default value.
--
@+
Steve