note 76422 added to security.globals
| From: | Timbo at osu1 dot php dot net | Date: | Sat, 14 Jul 2007 15:25:03 +0000 |
| Subject: | note 76422 added to security.globals | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-128519@lists.php.net to get a copy of this message | ||
In response to the above post by Caliwebman at yahoo dot com, a.k.a. "Gentle Warrior" who
complained about the lack of documentation on register_globals:
I think this code snippet will address the *main* source of his confusion:
<?
function readyToBeAProgrammer()
{
$stuff=$_URINALYSIS['test'];
if($stuff == THC)
{
return false;
}
else
{
return true;
}
// register_globals is all about knowing where your variables are really coming from
// what if a malicious user tried to pass off
// $stuff=$_GET['someone_elses_drop']; // as $stuff ?
// preventing this kind of substitution is the whole point
// of disabling register_globals
}
if(!readyToBeAProgrammer())
{
die("Switch to coffee, man!");
}
?>
P.S., let's give it up in appreciation for the moderators who must sit though and clean up
these boards, facetious posts like mine included...
----
Server IP: 64.71.164.2
Probable Submitter: 128.227.11.165
----
Manual Page -- http://www.php.net/manual/en/security.globals.php
Edit -- https://master.php.net/note/edit/76422
Del: integrated -- https://master.php.net/note/delete/76422/integrated
Del: useless -- https://master.php.net/note/delete/76422/useless
Del: bad code -- https://master.php.net/note/delete/76422/bad+code
Del: spam -- https://master.php.net/note/delete/76422/spam
Del: non-english -- https://master.php.net/note/delete/76422/non-english
Del: in docs -- https://master.php.net/note/delete/76422/in+docs
Del: other reasons-- https://master.php.net/note/delete/76422
Reject -- https://master.php.net/note/reject/76422
Search -- https://master.php.net/manage/user-notes.php