note 16910 deleted from function.extract by zak

From: Date: Thu, 29 Nov 2001 22:28:30 +0000
Subject: note 16910 deleted from function.extract by zak
References: 1  Groups: php.notes 
Request: Send a blank email to php-notes+get-21457@lists.php.net to get a copy of this message
You will have a hard time accessing the output variable for a key that has a space in its name. Personally, I still do not know how to access the output variable (or whether it had actually been created). $oz = array("tin man" => "heart"); extract($oz); echo $tin man; // parse error; echo ${tin man}; // parse error; echo $tin_man; // no such variable This suggest that there might be some security issues regarding extract(). Consider if it was used from a array populated from a user input.

« previous php.notes (#21457) next »