Lester Caine wrote:
Vernon Webb wrote:
Register Globals?
You got it. Is there any advantage to having this turned off?
It's a major security hole if left on ;)
it's a major _potential_ security hole. proper initialized of all
[global] variables (and santization of incoming data) means an application
running under register_globals can be as safe as one running without.
the reality of course is that there are millions of security issues out
there due to the problem of global variables not being initialized ... :-P
And convincing people to plug that hole was not
happening, so something
more major was needed.
As I understand it - PHP6 will not even have the option to enable it at
all :)
correct - setting register_globals in php6 will cause an error.
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
