On Friday, August 8, 2003, at 10:28 AM, Neil Davis wrote:

Fellas,
can't see how this should be an issue.
It is a security issue. Most ISP's don't allow register_globals to be turned
on. Read the php docs about register_globals. Zeev and company explain it
better than I can.
http://www.php.net/register_globals

Please re-read what I wrote in context. I'm fully aware of the whole register_globals situation. Have read (and wrote) heaps on the topic.


The OP was talking about RG issues when upgrading versions... In regards to upgrading, the fact that register_globals defaults to off, not on in newer versions should not be a deterent to upgrading, because the value can simply be edited in the php.ini file, changed via a htaccess file, etc etc.

I was not AT ALL suggesting that turning on register_globals was a good idea... I was suggesting that the setting could be easily switched to match the value on other servers (on or off as required).

Me? I code strictly for RG off, and have done so for ages, and force RG to be off regardless of my ISP's settings via a htaccess file.


Cheers,


Justin


-- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php



Reply via email to