note 40346 added to security.registerglobals
| From: | frog-man at phpsecure dot info | Date: | Sun, 29 Feb 2004 22:59:24 +0000 |
| Subject: | note 40346 added to security.registerglobals | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-66008@lists.php.net to get a copy of this message | ||
Here is a way of simulating the register_globals option ON when it is OFF, without overwriting
globals variables :
<?php
if (!ini_get("register_globals")){
foreach ($_REQUEST as $k=>$v){
if (!isset($GLOBALS[$k])){
${$k}=$v;
}
}
}
?>
It could be used to apply a filter on the REQUEST variables entered by the user.
This will work too :
<?php
extract($_REQUEST,EXTR_SKIP);
?>
but without possibility of filter.
----
Manual Page -- http://www.php.net/manual/en/security.registerglobals.php
Edit -- http://master.php.net/manage/user-notes.php?action=edit+40346
Delete -- http://master.php.net/manage/user-notes.php?action=delete+40346&report=yes
Reject -- http://master.php.net/manage/user-notes.php?action=reject+40346&report=yes
Search -- http://master.php.net/manage/user-notes.php