Re: register_globals on or off?
| From: | Hardy Merrill | Date: | Tue, 03 Apr 2001 15:09:20 +0000 |
| Subject: | Re: register_globals on or off? | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-46826@lists.php.net to get a copy of this message | ||
hi [noneofyourbusiness@none.com] wrote:
> Hi,
>
> Could someone explain what the following passage in php.ini means:
>
> You should do your best to write your scripts so that they do not require
> ; register_globals to be on; Using form variables as globals can easily
> lead
> ; to possible security problems, if the code is not very well thought of.
>
> If register_globals is off, does that mean you cannot access form variables
> by just referring to their name? And, if that is so, how do you pass
> information from forms to your action script?
If you had register_globals Off *AND* track_vars On, you could change:
from: $frmCompanyName
to: $HTTP_GET_VARS["frmCompanyName"]
or
$HTTP_POST_VARS["frmCompanyName"]
depending on your action method.
HTH.
--
Hardy Merrill
Mission Critical Linux, Inc.
http://www.missioncriticallinux.com
>
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net
> For additional commands, e-mail: php-general-help@lists.php.net
> To contact the list administrators, e-mail: php-list-admin@lists.php.net