note 22685 deleted from security.registerglobals by philip
| From: | philip@php.net | Date: | Mon, 02 Dec 2002 20:13:35 +0000 |
| Subject: | note 22685 deleted from security.registerglobals by philip | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-40268@lists.php.net to get a copy of this message | ||
With the register global turned off, you can use the $_GET, $_POST, $COOKIE, $_SERVER, $_ENV,
$_REQUEST or $_SESSION. If you use the hyperlink, like "<a
href='next_page.php?menu=1&submenu=1'>Next</a>". This defeated the
security purpose and allow the hacker to know the terms like "menu" or
"submenu".