Re: register_globals in php4
| From: | Miguel Cruz | Date: | Thu, 09 May 2002 22:33:55 +0000 |
| Subject: | Re: register_globals in php4 | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-96881@lists.php.net to get a copy of this message | ||
On Thu, 9 May 2002, Kevin Stone wrote:
>> If register_globals is off, then you'll get $_GET['id'] = 3 and
>> $_GET['sex'] = female. It's then up to you to make sure those are okay.
>> But at least $id and $sex won't get set until you explicitly set them in
>> your code.
>
> Hmm. No offense Miguel, but I don't believe turning Registered Globals off
> will have any effect on security.
If all programmers were perfect, very few security mechanisms would be
necessary.
But they aren't, so things like this just make it a little bit easier to
create secure software.
miguel