Re: [PHP-DEV] Re: The new $_GET/POST/ENV (was: Re: [PHP-CVS] cvs: php4 / NEWS...) From: Jason Greene (usrgre-php <email protected>)
Date: 08/08/01

----- Original Message -----
From: "Zeev Suraski" <zeev <email protected>>
To: "Jason Greene" <jason <email protected>>
Cc: "Jani Taskinen" <sniper <email protected>>; "Cynic" <cynic <email protected>>; <php-dev <email protected>>
Sent: Wednesday, August 08, 2001 1:20 PM
Subject: Re: [PHP-DEV] Re: The new $_GET/POST/ENV (was: Re: [PHP-CVS] cvs: php4 / NEWS...)

> My top of the list is:
>
> $_REQUEST
> $_EVIL (Andi and I think it's really pretty good, but we both figured we'll
> end up going with a different alternative :)

What about $_TAINTED ?

-Jason

>
> Zeev
>
> At 21:12 08-08-01, Jason Greene wrote:
> >What about using the acronyms in any combination.....
> >
> >like $_GPC
> >and $_GC
> >and etc....
> >
> >-Jason
> >----- Original Message -----
> >From: "Cynic" <cynic <email protected>>
> >To: "Jani Taskinen" <sniper <email protected>>
> >Cc: "Zeev Suraski" <zeev <email protected>>; <php-dev <email protected>>
> >Sent: Wednesday, August 08, 2001 1:25 PM
> >Subject: Re: [PHP-DEV] Re: The new $_GET/POST/ENV (was: Re: [PHP-CVS] cvs:
> >php4 / NEWS...)
> >
> >
> > > At 20:14 8/8/2001, Jani Taskinen wrote the following:
> > > --------------------------------------------------------------
> > > >On Wed, 8 Aug 2001, Cynic wrote:
> > > >
> > > >>How about $_DONT_TOUCH_THIS ? :)
> > > >>Seriously though, I vote for $_REQUEST. After all, it contains
> > > >>data which is (generally) tied to one particular request...
> > > >
> > > >This reminds me that should the $_FILES be included in this
> > > >data too? As it's also something you shouldn't trust and
> > > >it's also coming from the user.
> > > >
> > > >--Jani
> > >
> > > Yeah. And $_SESSION too.
> > >
> > >
> > >
> > > cynic <email protected>
> > > -------------
> > > And the eyes of them both were opened and they saw that their files
> > > were world readable and writable, so they chmoded 600 their files.
> > > - Book of Installation chapt 3 sec 7
> > >
> > >
> > > --
> > > PHP Development Mailing List <http://www.php.net/>
> > > To unsubscribe, e-mail: php-dev-unsubscribe <email protected>
> > > For additional commands, e-mail: php-dev-help <email protected>
> > > To contact the list administrators, e-mail: php-list-admin <email protected>
> > >
>
> --
> Zeev Suraski <zeev <email protected>>
> CTO & co-founder, Zend Technologies Ltd. http://www.zend.com/
>
>
> --
> PHP Development Mailing List <http://www.php.net/>
> To unsubscribe, e-mail: php-dev-unsubscribe <email protected>
> For additional commands, e-mail: php-dev-help <email protected>
> To contact the list administrators, e-mail: php-list-admin <email protected>
>
> 

-- 
PHP Development Mailing List <http://www.php.net/>
To unsubscribe, e-mail: php-dev-unsubscribe <email protected>
For additional commands, e-mail: php-dev-help <email protected>
To contact the list administrators, e-mail: php-list-admin <email protected>