RE: POST and GET form

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Register Globals is off because it prevents security issues with your code.
There is an example on the PHP Manual that shows how can anyone access into
a membership-based site if it works with Register Globals on. No one would
need to use a form, for example, because typing the correct variables on the
URL, you could enter the site, or even see other people's accounts (they are
stored in the browser's memory).

Besides that, it's a good programming habit to write $_GET or $_POST instead
of just the variable name.

Bye!
MG29

-----Mensaje original-----
De: Patrick Dufresne [mailto:duff3@primus.ca]
Enviado el: Sábado, 01 de Noviembre de 2003 06:49 p.m.
Para: php-windows@lists.php.net
Asunto: Re:  POST and GET form


Gaguwd a écrit :
> How do you try to recover it?
>
> You must use this type of variable to recover your data:
> $_POST['variable_name'] and $_GET['variable_name']

Yeah!  I just found it there:
http://www.php.net/manual/en/faq.using.php#faq.using.variables

Why register_globals is now OFF by default?  I put it ON until I change
my variable.

--
PHP Windows Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

-- 
PHP Windows Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


[Index of Archives]     [PHP Home]     [PHP Users]     [PHP Database Programming]     [PHP Install]     [Kernel Newbies]     [Yosemite Forum]     [PHP Books]

  Powered by Linux