On 15-Dec-06, at 6:40 PM, Alain Williams wrote:
OK: so there may be a few cases where it won't work, that does not
mean
that there won't be great advantages for the majority of situations.
I'd wager there would be more then a few instances, but without code
its kinda hard to demonstrate.
All it means that this breaks every applications and the security
benefits are somewhat ambiguous, but in all fairness the full
consequences are hard to predict without sample code.
It is OFF by default.
RegisterGlobals was initially ON by detault since loosing it broke
a lot of code. PHP survived that.
Because an even more convenient replacement in a form of super-
globals was introduced.
Ilia Alshanetsky
--
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: http://www.php.net/unsub.php
