On 11/04/02, "Aaron Bannert" <[EMAIL PROTECTED]> wrote: > On Thu, Apr 11, 2002 at 02:20:00AM +0100, Wez Furlong wrote: > > the php configuration directive register_globals defaults to off > > in PHP 4.2; are you sure it's not just due to misconfiguration? > Yeah, that was the problem. > > I'm sure I could go look back in the logs for why this change > occured, but the part of me that spent *way* too long on this > has to ask: Why did this change? Doesn't this violate the > Principle of Least Astonishment?
For reasons of security (register_globals encourages less secure PHP scripts). The change is mentioned in NEWS, but having said that, it bit me fairly recently too... --Wez. -- PHP Development Mailing List <http://www.php.net/> To unsubscribe, visit: http://www.php.net/unsub.php
