Re: Register Globals=ON
| From: | John Holmes | Date: | Mon, 03 Jan 2005 16:59:30 +0000 |
| Subject: | Re: Register Globals=ON | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-205535@lists.php.net to get a copy of this message | ||
HarryG wrote:
Having register_globals=on and referring to variables as if($name){} or using $_GET & $_POST statements like if(isset($_GET['name']))? What is the main advantage/disadvantage in both cases.Doesn't matter if it's on or off, really. 1) Don't trust any input from the user 2) Always initialize any variables you use Follow those two rules and you can program secure programs that will not depend upon register globals. -- ---John Holmes... Amazon Wishlist: www.amazon.com/o/registry/3BEXC84AB3A5E/ php|architect: The Magazine for PHP Professionals – www.phparch.com