 |
 |
 |
 |
|
|
Date: 07/04/01
- Next message: jeroen <email protected>: "[PHP-DOC] Bug #11874 Updated: <script> way of inline'ing PHP has quite strict syntax"
- Previous message: Rasmus Lerdorf: "[PHP-DOC] Re: [PHP-DEV] Security?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
> > I also think that PHP5.0 since we are breaking
> language compat,
> > perhaps we should turn off register_globals by default? I
> just see to
> > many chances for fscking up things big time when using that
> > functionality....
>
> I still don't agree on this particular point. All this does is limit
> where data can come from.
And also prevent namespace clashes, eg a GET/POST variable named the
same
as session variables. Turning register_globals off would probably
prevent
a lot of head scratching for peeps who've not come across this issue
before.
-- Richard Heyes
- Next message: jeroen <email protected>: "[PHP-DOC] Bug #11874 Updated: <script> way of inline'ing PHP has quite strict syntax"
- Previous message: Rasmus Lerdorf: "[PHP-DOC] Re: [PHP-DEV] Security?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]