Re: PHP 4.10: any way to override register_globals = OFF
| From: | Zeev Suraski | Date: | Mon, 24 Dec 2001 10:39:27 +0000 |
| Subject: | Re: PHP 4.10: any way to override register_globals = OFF | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-78671@lists.php.net to get a copy of this message | ||
Just FYI - if you use extract($_REQUEST), you're exposed to the very same danger that exists in register_globals.
You're much better off using import_request_variables(), which allows you some control over what you put in the global scope.
Zeev
At 01:14 18/12/2001, Michael Jurgens wrote:
Hey Guys, Thanks a lot, I allways use some config files that I include in every page, and with "extract ($_REQUEST);" added to one of those files, almost all of my problems are history. I'm now working on getting $PHP_SELF etc back working, but that should work out. Amazing this newsgroup, thank you all, Greetz, Michael "Richard Heyes" <richard@phpguru.org> wrote in message news:NEBBIDEMHHJJCANAAAKFMEHLKCAA.richard@phpguru.org...extract($_GET); -- Richard Heyes "If you have any trouble sounding condescending, find a Unix user to show you how it's done." - Scott Adams -- PHP General Mailing List (http://www.php.net/) To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net For additional commands, e-mail: php-general-help@lists.php.net To contact the list administrators, e-mail: php-list-admin@lists.php.netfor all in $_GET { $[varname] = $_GET[varname] }Could anyone give me some pointers in actually programming this?