Re: solutions to disadvantages when register_globals is off
| From: | Carsten Gehling | Date: | Sun, 21 Jan 2001 23:58:14 +0000 |
| Subject: | Re: solutions to disadvantages when register_globals is off | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-35929@lists.php.net to get a copy of this message | ||
From: "Rasmus Lerdorf" <rasmus@php.net>
Sent: Sunday, January 21, 2001 8:42 PM
> For experienced PHP developers having register_globals on should not be a
> security issue. Injecting arbitrary variables into your symbol table is
> only a problem if you arbitrarily use such variables without initializing
> or checking them for validity.
<snip>
Are there any real performance gained by turning register_globals off? After
all, it must take the php engine some clock cycles to generate all the
global variables. Have anyone tested it?
- Carsten
~~~~~~~~~~~~~~~~