Read this link: http://www.php.net/manual/en/security.registerglobals.php

Having register_globals set to on can make it easier for someone to exploit
poorly written code (there are examples on the page).

I like to use register_globals=off too because I know explicitly where each
variable is coming from (i.e. POST, GET, COOKIE, SESSION, etc).

-Dash

-----Original Message-----
From: Marie Monday [mailto:Marie.Monday@;ncmail.net] 
Sent: Monday, November 04, 2002 6:11 AM
To: [EMAIL PROTECTED]
Subject: Re: [PHP-WIN] 2 Issues for Mail() in Win/PHP4-


I've been scanning the list msgs trying to figure out why that's
discouraged.  Anyone know why?

"Charles P. Killmer" wrote:

> Also check and make sure that you have register_globals set to on in
php.ini  Some argue that you shouldn't use that though.
>
> Charles Killmer
>
> -----Original Message-----


-- 
PHP Windows Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to