note 43706 deleted from security.variables by aidan
| From: | aidan@php.net | Date: | Tue, 07 Sep 2004 23:32:06 +0000 |
| Subject: | note 43706 deleted from security.variables by aidan | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-76179@lists.php.net to get a copy of this message | ||
Note Submitter: rick at NOSPAM dot exploringnatalie dot com
----
As I have to have register_globals turned on, I use this similar bit to protect against
register_globals related variable attacks. (I also run the foreach on $_POST, etc...)
foreach ($_GET as $getvarname => $rawgetcontent)
{
unset($$getvarname);
// OTHER PROTECTION CODE
}
As far as I can tell, this is effective...