> > Now mimicking $_SESSION functionality is another story, eww, maybe that's
> > going too far.
> 
> This can be done by a register_shutdown_function() who registers
> all the vars in $_SESSION, using session_register. That's all :))
> If I can understand this new feature correctly (I never used it).

LOL, no comment :)

> > Regarding the extract() idea, please clarify a little more.
> 
> I think Rasmus referred to the register_globals deprecation
> question, which is another thing IMHO, that need to be documented.

Okay that makes sense.  Was thinking on the lines of a 
serialized constant :)

> There are many "user notes" coming up about using:
> 
> extract($_REQUEST);
> 
> and the like to simluate register_globals. This can
> be a really bad thing sometimes...

Yes it can be.  People will continue to do this, we'll need to 
keep expanding/referring to security.registerglobals:

  http://www.php.net/manual/en/security.registerglobals.php

Regards,
Philip Olson






-- 
PHP Development Mailing List <http://www.php.net/>
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Reply via email to