note 15798 deleted from ref.session by sniper

From: Date: Tue, 21 Jan 2003 03:23:50 +0000
Subject: note 15798 deleted from ref.session by sniper
References: 1  Groups: php.notes 
Request: Send a blank email to php-notes+get-42491@lists.php.net to get a copy of this message
This is in response to netben@free.fr posting of 04-Oct-2000 09:11: Be extremely careful with this. This allows anyone to overwrite _any_ internal variables which may have been set during script initialization!!! It is far better to do something like this: $expected_vars=array("var1","var2","var3"); foreach($expected_vars as $key) if($HTTP_GET_VARS[$key]) $$key=$HTTP_GET_VARS[$key]; i.e. populate the array expected_vars with exactly what you expect first. Michael

« previous php.notes (#42491) next »