note 23991 deleted from security.registerglobals by philip
| From: | philip@php.net | Date: | Mon, 02 Dec 2002 20:15:03 +0000 |
| Subject: | note 23991 deleted from security.registerglobals by philip | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-40272@lists.php.net to get a copy of this message | ||
Hrm, it seems to me a safer thing to do would be to functionize the above -and provide an argument-.
function import($var)
{
if(isset($HTTP_GET_VARS[$var]))
{
$$var = $HTTP_GET_VARS[$var];
} else if(isset($HTTP_POST_VARS[$var]))
{
$$var = $HTTP_POST_VARS[$var];
}
}
I'm 99% sure this will work, once I add $GLOBALS[] in the appropriate places (I'm a bit
new at this here PHP stuff ;)
This way, you can explicitly import only the variables you need, when you need them. Of course
there's the usual caveats about content checking etc, but I think this will go a long way to
help.