[PHP] is register globals off ready for prime time

2003-04-04 Thread Ray Todd Stevens
Working on a project where we have an off shore developer.   We 
are runnig 4.3 and have turned register globals off.  He says that 
this option is not ready for production use and breaks php internally.  
I have never heard this before.   Has anyone heard this, or 
experienced this.

--
Ray Todd Stevens Specialists in Network and Security 
Consulting
Senior ConsultantSoftware audit service available
Stevens Services
Suite 21
3754 Old State Rd 37 N
Bedford, IN 47421
(812) 279-9394
[EMAIL PROTECTED]

Thought for the day:
Dictatorship (n): a form of government under which everything 
which is not prohibited is compulsory.


For PGP public key send message with subject 
please send PGP key

If this message refers to an attachment the attachment
may arrive as a seperate mail message depending on the
type of mail client and gateway software you are using.


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



RE: [PHP] is register globals off ready for prime time

2003-04-04 Thread John W. Holmes
 Working on a project where we have an off shore developer.   We
 are runnig 4.3 and have turned register globals off.  He says that
 this option is not ready for production use and breaks php internally.
 I have never heard this before.   Has anyone heard this, or
 experienced this.

Ummm... no. That's not true. It may break certain programs that were
written and are expecting register_globals to be on, but that's it. 

---John W. Holmes...

PHP Architect - A monthly magazine for PHP Professionals. Get your copy
today. http://www.phparch.com/



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] is register globals off ready for prime time

2003-04-04 Thread Ernest E Vogelsinger
At 09:51 04.04.2003, Ray Todd Stevens said:
[snip]
Working on a project where we have an off shore developer.   We 
are runnig 4.3 and have turned register globals off.  He says that 
this option is not ready for production use and breaks php internally.  
I have never heard this before.   Has anyone heard this, or 
experienced this.
[snip] 

Maybe it breaks _his_ code, but it is off by default since I believe 4.1.0,
and IMHO _should_ remain off at all times. Too easy to inject into your
code as to MHO.#

Either this guy is trying to deceive his own weak code, or he doesn't have
a clue of how PHP works. I'd reconsider hiring such a developer.


-- 
   O Ernest E. Vogelsinger
   (\)ICQ #13394035
^ http://www.vogelsinger.at/



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



RE: [PHP] is register globals off ready for prime time

2003-04-04 Thread John Coggeshall

He's wrong.

John


-~=~--~=~--~=~--~=~--~=~--~=~--~=~--~=~--~=~--~=~--~=~--~=~--~=~--~=~-
John Coggeshall
john at coggeshall dot org  http://www.coggeshall.org/
-~=~--~=~--~=~--~=~--~=~--~=~--~=~--~=~--~=~--~=~--~=~--~=~--~=~--~=~-


-Original Message-
From: Ray Todd Stevens [mailto:[EMAIL PROTECTED] 
Sent: Friday, April 04, 2003 7:47 AM
To: [EMAIL PROTECTED]
Subject: [PHP] is register globals off ready for prime time


Working on a project where we have an off shore developer.   We 
are runnig 4.3 and have turned register globals off.  He says that 
this option is not ready for production use and breaks php 
internally.  
I have never heard this before.   Has anyone heard this, or 
experienced this.

--
Ray Todd Stevens Specialists in Network and Security 
Consulting
Senior ConsultantSoftware audit service available
Stevens Services
Suite 21
3754 Old State Rd 37 N
Bedford, IN 47421
(812) 279-9394
[EMAIL PROTECTED]

Thought for the day:
Dictatorship (n): a form of government under which everything 
which is not prohibited is compulsory.


For PGP public key send message with subject 
please send PGP key

If this message refers to an attachment the attachment
may arrive as a seperate mail message depending on the
type of mail client and gateway software you are using.


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php