RE: [PHP-WIN] 2 Issues for Mail() in Win/PHP4-
| From: | Dash McElroy | Date: | Mon, 04 Nov 2002 17:32:30 +0000 |
| Subject: | RE: [PHP-WIN] 2 Issues for Mail() in Win/PHP4- | ||
| Groups: | php.windows | ||
| Request: | Send a blank email to php-windows+get-16724@lists.php.net to get a copy of this message | ||
Read this link: http://www.php.net/manual/en/security.registerglobals.php
Having register_globals set to on can make it easier for someone to exploit
poorly written code (there are examples on the page).
I like to use register_globals=off too because I know explicitly where each
variable is coming from (i.e. POST, GET, COOKIE, SESSION, etc).
-Dash
-----Original Message-----
From: Marie Monday [mailto:Marie.Monday@ncmail.net]
Sent: Monday, November 04, 2002 6:11 AM
To: php-windows@lists.php.net
Subject: Re: [PHP-WIN] 2 Issues for Mail() in Win/PHP4-
I've been scanning the list msgs trying to figure out why that's
discouraged. Anyone know why?
"Charles P. Killmer" wrote:
> Also check and make sure that you have register_globals set to on in
php.ini Some argue that you shouldn't use that though.
>
> Charles Killmer
>
> -----Original Message-----