Am 11.09.2011 06:31, schrieb Rui Hirokawa:
> Hello,
> 
> I think the second argument of parse_str/mb_parse_str
> should be changed from optional to mandatory.
> parse_str(string encoded_string [, array result])
> -> parse_str(string encoded_string , array result)

no because there is no reason and all what will happen is

parse_str($a, $b);
extract($b);

so please leave us in peace with the need to add the second line

> It is to reduce the risk of vulnerability, and it has neary same risk
> as register_globals which is removed from PHP 5.4

it has not, inside a function this is absolutely safe and if
you are writing spaghetti-code nothing can help you

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to