note 40689 deleted from language.variables.predefined by curt

From: Date: Tue, 06 Jul 2004 03:07:13 +0000
Subject: note 40689 deleted from language.variables.predefined by curt
References: 1  Groups: php.notes 
Request: Send a blank email to php-notes+get-72663@lists.php.net to get a copy of this message
Note Submitter: phpnet@onsetcorps.net ---- folks, some of you do not seem to realize that extracting all you _GET/_POST/_COOKIE arrays to the global scope defeats the purpose of having register_globals turned off. (ie debabratak at softhome dot net above) The point is to make sure you know where your variables are coming from, espeically your $has_auth variables for example. Good coding practice dictates that you now put $_POST['foo'] where you used to just willy-nilly put $foo (assuming $foo came from a POST). Get in the habit of it and save yourself a headache. And if your host can't keep the PHP on the server up to date, get a new host - there are too many bugs and security holes to even mention in older versions.

« previous php.notes (#72663) next »