note 84358 deleted from security.globals by danbrown
| From: | danbrown@php.net | Date: | Thu, 15 Jan 2009 16:21:23 +0000 |
| Subject: | note 84358 deleted from security.globals by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-149262@lists.php.net to get a copy of this message | ||
Note Submitter: stranger at teuton dot org
----
RE: Anonymous on oirinely at yahoo dot com
Actually oirinely is correct. With register_globals on any key in $_SESSION becomes a global
variable when session_start() happens. This means that assigning a value to any variable that has
the same name as any existing $_SESSION key (when register_globals is on and session_start() has
happened) is the same as assigning to $_SESSION
e.g.
<?php
session_start();
$_SESSION['foo'] = 1;
$foo = 2;
echo $_SESSION['foo'];
?>
result = 1