note 81947 deleted from security.globals by danbrown
| From: | danbrown@php.net | Date: | Thu, 15 Jan 2009 16:22:34 +0000 |
| Subject: | note 81947 deleted from security.globals by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-149264@lists.php.net to get a copy of this message | ||
Note Submitter: subarea
----
If you have no access to php.ini and the solution with
the .htaccess entry (php_flag register_globals 0)
also doesn't work or you are just a little bit paranoid,
you can use the following script.
this is just a workaround to kill all (through register globals) imported vars!
<?php
foreach(array_keys($_REQUEST) as $var_to_kill) unset($$var_to_kill);
foreach(array_keys($_SESSION) as $var_to_kill) unset($$var_to_kill);
foreach(array_keys($_SERVER) as $var_to_kill) unset($$var_to_kill);
unset($var_to_kill);
?>
if you like it, just drop me a line...
greetz subarea