Toby, You may have some fun in this undertaking. If most of your variables are of one type (i.e. POST, or GET) then your transition should be relatively easy. You can't just do a mass replace though, as variables you set in the script won't work if you make them $_POST['varname']. It gets a bit messier with cookies and other stuff.
You may want to take a look at the user's comments on this page: http://www.php.net/manual/en/security.registerglobals.php There are some neat ideas on how to import variables easily and nice. It's probably easier, from now on, to use the _GET, _POST, _ETC methods :) Good luck! -Dash -----Original Message----- From: toby z [mailto:[EMAIL PROTECTED]] Sent: Sunday, July 07, 2002 10:53 PM To: php hlp list Subject: Re: [PHP-WIN] playing with register globals .... & nother thing i have to allow users to upload their files on MY server ... :s > plz pardon my ignorence > > i ve been working with php for the last 3 and a 1/2 > months and i turned my register globals ON when i > started off initially knowing im risking security > > now i have to upload the site and i simply cannot > risk > security anymore > > what shall i do ???? > > if i turn register globals OFF i guess ill have to > change all my variables in ALLLLL the pages i ve > made > or will i ???? > and the count of the variables .... allah alone > knows > > help me plz > > id appriciate any help on this > > thnx a million .... > > stuck as usual > toby ..... > > > __________________________________________________ > Do You Yahoo!? > Sign up for SBC Yahoo! Dial - First Month Free > http://sbc.yahoo.com > > -- > PHP Windows Mailing List (http://www.php.net/) > To unsubscribe, visit: http://www.php.net/unsub.php > __________________________________________________ Do You Yahoo!? Sign up for SBC Yahoo! Dial - First Month Free http://sbc.yahoo.com -- PHP Windows Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php -- PHP Windows Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php