Re: [PHP-DEV] Re: [PHP-DOC] Re: [PHP-DEV] Security?

2001-07-09 Thread derick
On Mon, 9 Jul 2001, Wez Furlong wrote: > On 07/07/01, "Andi Gutmans" <[EMAIL PROTECTED]> wrote: > > Zeev suggested $__GET, $__POST and so on. I think this is a good idea, is > > very readable and saves a lot of typing. We also thought of possibly making > > these true globals such as $GLOBALS (ju

Re: [PHP-DEV] Re: [PHP-DOC] Re: [PHP-DEV] Security?

2001-07-07 Thread Joey Smith
+1 for $__GET, $__POST, etc. These would be part of track_vars? On Sat, 7 Jul 2001, Andi Gutmans wrote the following to Ron Chmara and...: > At 11:36 PM 7/6/2001 -0700, Ron Chmara wrote: > >Suggestions/Ideas to mock or approve/improve upon. > >1. Modify the "secured" var stack names, so calling

[PHP-DEV] Re: [PHP-DOC] Re: [PHP-DEV] Security?

2001-07-06 Thread Ron Chmara
First of all, looking over this, this is all alreadly covered by the (possibly anemic) security section..which could definitely use more examples, explanations, and exploit examples (hint hint). On Wednesday, July 4, 2001, at 10:05 AM, sterling hughes wrote: > On 03 Jul 2001 19:13:20

[PHP-DEV] RE: [PHP-DOC] Re: [PHP-DEV] Security?

2001-07-04 Thread Hojtsy Gábor
Title: RE: [PHP-DOC] Re: [PHP-DEV] Security? > > But, I do think it would be worthwhile to go through these and add a > > section to the documentation highlighting the pitfalls and explaining how > > to avoid them. > There is a security chapter in the manual now... We should put this u

[PHP-DEV] RE: [PHP-DOC] Re: [PHP-DEV] Security?

2001-07-04 Thread Hojtsy Gabor
Title: RE: [PHP-DOC] Re: [PHP-DEV] Security? > But, I do think it would be worthwhile to go through these and add a > section to the documentation highlighting the pitfalls and explaining how > to avoid them. There is a security chapter in the manual now... Goba