Re: register_globals
| From: | Rasmus Lerdorf | Date: | Mon, 01 Apr 2002 15:01:05 +0000 |
| Subject: | Re: register_globals | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-90961@lists.php.net to get a copy of this message | ||
You would be better off reading the security chapter in the PHP
documentation. It is much better informed than that study-in-scarlet
thing.
On Mon, 1 Apr 2002, Erik Price wrote:
>
> On Sunday, March 31, 2002, at 04:05 AM, Liam wrote:
>
> > at the moment I have register_globals set to "on"
> > Is there any reason I should turn it off?
> >
> > What are the security risks of having them on?
>
> I once asked this exact question, and here is the response I got -- I
> found it very helpful:
>
> > Give this a read first, then come back if you still have questions ;)
> >
> > http://www.securereality.com.au/studyinscarlet.txt
> >
> > Kirk
>
>
> Erik
>
>
> ----
>
> Erik Price
> Web Developer Temp
> Media Lab, H.H. Brown
> pricee@hhbrown.com
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>