Re: register_globals
| From: | Erik Price | Date: | Mon, 01 Apr 2002 14:57:56 +0000 |
| Subject: | Re: register_globals | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-90958@lists.php.net to get a copy of this message | ||
On Sunday, March 31, 2002, at 04:05 AM, Liam wrote:
at the moment I have register_globals set to "on" Is there any reason I should turn it off? What are the security risks of having them on?I once asked this exact question, and here is the response I got -- I found it very helpful:
Give this a read first, then come back if you still have questions ;) http://www.securereality.com.au/studyinscarlet.txt KirkErik ---- Erik Price Web Developer Temp Media Lab, H.H. Brown pricee@hhbrown.com