Re: re[PHP] gister_globals
| From: | Sancar Saran | Date: | Wed, 16 Jan 2008 15:10:56 +0000 |
| Subject: | Re: re[PHP] gister_globals | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-267390@lists.php.net to get a copy of this message | ||
On Wednesday 16 January 2008 15:33:04 Jochem Maas wrote:
> tbt schreef:
> > Hi,
> >
> > I'm a newbie to php and i would like to set register_globals to 'on' from
> > my php script itself(eg:- index.php). Is there any way of doing this.
>
> you think you would like that. but you are wrong. register_globals is a
> security risk in the hands of someone who doesn't know exactly what they
> are doing.
>
> besides which register_globals is depreciated. also you can search the
> list archives for lots of posts that explain why register_globals is evil.
>
> learn how to write your script without using register_globals - ask here if
> you get stuck (but don't forget the manual!).
>
> > Thanks
Hell frezezer over. Me thinks regsiter_globals are evil too.
And what about this
session_start();
$_SESSION['refString'] = $_GET['refNo'];
Sancar