Am 16.09.2017 um 13:48 schrieb Marco Pivetta:
"then don't use it" worked great for `register_globals` and `magic_quotes`. Not saying it is the same here, but you really ought to have a bit of a mentality adjustment

so when it is not the same why do you mention it?

there is a difference between a config option which can change on each and every machine at every point in time and completly and then completly change behavior or a explicit function call

what is the next step in your logic?

remove foreach() because one could do foreach($_REQUEST as $key=>$var) to emulate extract() after you took it away?

PHP is a programming language and not a office software - it depends on the usecase and source of data to qualify a operation as safe and it's completly the responsibility of the programmer using a programming language, not yours

--
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to