Re: Undefined variables
| From: | Shane Wright | Date: | Sun, 31 Mar 2002 02:01:46 +0000 |
| Subject: | Re: Undefined variables | ||
| References: | 1 2 3 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-90846@lists.php.net to get a copy of this message | ||
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
sorry, didnt get that that was your prefered method - didnt mean to step on
your toes :)
S
On Sunday 31 March 2002 2:50 am, Lars Torben Wilson wrote:
> On Sat, 2002-03-30 at 17:43, Shane Wright wrote:
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> >
> > > Not really. You either have to init your variables or turn off notices
> > > in error_reporting() (or otherwise suppress them; i.e. display_errors =
> > > off).
> >
> > initialising them with safe defaults is the thing to do - the point of
> > the error is to warn about uninitialised variables (which, if
> > register_globals is on, could be used by an attacker to make your scripts
> > to bad things...)
> >
> > - --
> > Shane
>
> Yes, this is my standard suggestion as well, but since Ernesto seemed
> to be aware of the issues I decided not to press the point.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org
iD8DBQE8pm4K5DXg6dCMBrQRAsTLAJ9377x/gjRKbHrfcSYW11BKUgotgACfQmTw
x2rcCdMlPbAaPg8zAey7L/8=
=WVbB
-----END PGP SIGNATURE-----