> With register_globals OFF in your php.ini file, all of the user input is
> present in the _GET, _POST, _REQUEST, or _COOKIE array. With
> register_globals ON, then the variables are registered as regular variables.
> If you have a URL like page.php?id=1, then with them OFF, you have to use
> $_
ow where your variables are coming from.
---John Holmes...
- Original Message -
From: "Kurth Bemis (List Monkey)" <[EMAIL PROTECTED]>
To: "1LT John W. Holmes" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Saturday, May 25, 2002 4:07 PM
Subject: Re: [PHP]
;
>---John Holmes...
>
>- Original Message -
>From: "Kurth Bemis (List Monkey)" <[EMAIL PROTECTED]>
>To: <[EMAIL PROTECTED]>
>Sent: Saturday, May 25, 2002 3:23 PM
>Subject: [PHP] 4.2.1 Vars
>
>
> >
> > After moving to php 4.2.1 my script
ng nothing else
isn't making it any more secure that using it the way it is with
register_globals on.
---John Holmes...
- Original Message -
From: "Kurth Bemis (List Monkey)" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Saturday, May 25, 2002 3:23 PM
Subject:
) > 0) {
extract($arr, EXTR_OVERWRITE);
}
}
Somebody else posted this a few weeks back and it has worked for me until I
can convert everything over...
Jeff
- Original Message -
From: "Kurth Bemis (List Monkey)" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTE
After moving to php 4.2.1 my scripts that use xxx.php?blah=4 fail to work.
I know that i need to turn register_globals on in my config, however I know
that there are security problems with this. So bascially I need to know
how to make 500+ scripts work without editing a bunch of files to make
6 matches
Mail list logo