From: "Rasmus Lerdorf" <[EMAIL PROTECTED]>
Sent: Sunday, January 21, 2001 8:42 PM
> For experienced PHP developers having register_globals on should not be a
> security issue. Injecting arbitrary variables into your symbol table is
> only a problem if you arbitrarily use such variables without initializing
> or checking them for validity.
<snip>
Are there any real performance gained by turning register_globals off? After
all, it must take the php engine some clock cycles to generate all the
global variables. Have anyone tested it?
- Carsten
~~~~~~~~~~~~~~~~
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]
