Re: re[PHP] gister_globals
| From: | Sancar Saran | Date: | Thu, 17 Jan 2008 07:42:37 +0000 |
| Subject: | Re: re[PHP] gister_globals | ||
| References: | 1 2 3 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-267481@lists.php.net to get a copy of this message | ||
Hello
> >
> > Hell frezezer over.
>
> odd verb. but I get the message. indeed it's seem it hath freezeth nicely.
>
> > Me thinks regsiter_globals are evil too.
> >
> > And what about this
> >
> > session_start();
> >
> > $_SESSION['refString'] = $_GET['refNo'];
>
> what about it?
>
> 1. you mean the fact that the GET val is not sanitized?
> 2. or the oddness of 'refNo' becoming 'refString' (is it a string, a
> number, superman)? 3. or the direct use of $_SESSION and the lack of
> specific session cookie settings?
>
> 1. is evil, 2. is odd and 3. is a change recommendation ... if you ask me.
>
1. 2.
Orginal Code
<?php
session_start();
session_register("refString");
$refString = $_GET['refNo'];
?>
3. Could you explain a bit or re direct me a document about this ?
Sancar