Re: GOTO operator
| From: | Zeev Suraski | Date: | Fri, 30 Jul 2004 18:55:30 +0000 |
| Subject: | Re: GOTO operator | ||
| References: | 1 2 3 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-11707@lists.php.net to get a copy of this message | ||
At 21:47 30/07/2004, Ilia Alshanetsky wrote:
I did support it, but IIRC a security implications of having it enabled were also a major concern and perhaps the deciding factor in having this option disabled.Right & wrong. Yes, they were security implications, but not inherent to the feature itself. The security implications were simply a result of the fact that it was very easy to abuse it. You can write rock-solid secure code with register_globals enabled, we just wanted to eliminate this pitfall. Are we saying that we only take the possibility of abuse as a factor when we're dealing with security issues? I don't think we should differentiate between security and reliability considerations, and we certainly haven't in the past. Zeev