> It is simpler.

    Chuck is talking about another problem which I agree has not
    been addressed yet properly.

> We should just leave the array $HTTP_SESSION_VARS in the
> case when register_globals is on. Currently when the variables are registered
> they *are* removed from the $HTTP_SESSION_VARS array. I do not think this is
> the intended behaviour.

    That is not the behaviour I see.  The following script
    displays the correctly setup $HTTP_SESSION_VARS array when
    run multiple times with the current CVS.

    <?
    session_id("test");
    session_register("c");
    $c++;
    var_dump($HTTP_SESSION_VARS);

    - Sascha                                     Experience IRCG
      http://schumann.cx/                http://schumann.cx/ircg


-- 
PHP Development Mailing List <http://www.php.net/>
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Reply via email to