Re: Uninitialized Variables
| From: | Phil Driscoll | Date: | Thu, 15 Mar 2001 18:18:08 +0000 |
| Subject: | Re: Uninitialized Variables | ||
| Groups: | php.windows | ||
| Request: | Send a blank email to php-windows+get-6082@lists.php.net to get a copy of this message | ||
Florian wrote:
>error_reporting = E_ALL & ~E_NOTICE
Better yet, leave your warning levels as they are and don't have
uninitialised variables. They are a *bad* thing. Aside from general
sloppiness, they are a security breach waiting to happen. What if someone
initialises one to a dangerous value by passing it in as a get or post
variable?
Cheers
--
Phil Driscoll
Dial Solutions
+44 (0)113 294 5112
http://www.dialsolutions.com
http://www.dtonline.org