note 15798 added to ref.session
| From: | mic109 at rsphysse dot anu dot edu dot au | Date: | Wed, 03 Oct 2001 11:23:03 +0000 |
| Subject: | note 15798 added to ref.session | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-18510@lists.php.net to get a copy of this message | ||
This is in response to netben@free.fr posting of 04-Oct-2000 09:11:
Be extremely careful with this. This allows anyone to overwrite _any_ internal variables which may
have been set during script initialization!!! It is far better to do something like this:
$expected_vars=array("var1","var2","var3");
foreach($expected_vars as $key)
if($HTTP_GET_VARS[$key])
$$key=$HTTP_GET_VARS[$key];
i.e. populate the array expected_vars with exactly what you expect first.
Michael
--
http://www.php.net/manual/en/ref.session.php
http://master.php.net/manage/user-notes.php?action=edit+15798
http://master.php.net/manage/user-notes.php?action=delete+15798
http://master.php.net/manage/user-notes.php?action=reject+15798