Read this link: http://www.php.net/manual/en/security.registerglobals.php
Having register_globals set to on can make it easier for someone to exploit poorly written code (there are examples on the page). I like to use register_globals=off too because I know explicitly where each variable is coming from (i.e. POST, GET, COOKIE, SESSION, etc). -Dash -----Original Message----- From: Marie Monday [mailto:Marie.Monday@;ncmail.net] Sent: Monday, November 04, 2002 6:11 AM To: [EMAIL PROTECTED] Subject: Re: [PHP-WIN] 2 Issues for Mail() in Win/PHP4- I've been scanning the list msgs trying to figure out why that's discouraged. Anyone know why? "Charles P. Killmer" wrote: > Also check and make sure that you have register_globals set to on in php.ini Some argue that you shouldn't use that though. > > Charles Killmer > > -----Original Message----- -- PHP Windows Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php