ceo@xxxxxxxxx wrote:
There is no other code. This is an example I created to help me understand finer points of PHP.If register_globals is "on" (ewww!) at otherhost.com, then "?safe_flag" on the URL will get in. This is one of the reasons why register_globals should be OFF. NOTE: The code you gave does not describe the circumstances whereby $safe_flag is "set". There could be all manner of other issues around that code that we cannot address without seeing more.
thanks, dK