Re: [PHP] The so-called improvment in PHP 4.2.0

2002-04-23 Thread Rouvas Stathis
Miguel Cruz wrote: On Mon, 22 Apr 2002, Leif K-Brooks wrote: I use $formvar for form processing, I don't use the arrays. This is how I was taught to do it. If my host upgrades to 4.2.0, my website is as good as gone! What am I supposed to do?! Fix them! This direction was first

Re: [PHP] The so-called improvment in PHP 4.2.0

2002-04-23 Thread Erik Price
On Tuesday, April 23, 2002, at 06:48 AM, Rouvas Stathis wrote: This change improves your security, so it'd be rational to be happy about it. No it doesn't. It just provides another excuse for lazy programming. Nothing will save a lazy programmer or one that doesn't understand basic

Re: [PHP] The so-called improvment in PHP 4.2.0

2002-04-23 Thread Miguel Cruz
On Tue, 23 Apr 2002, Rouvas Stathis wrote: Miguel Cruz wrote: On Mon, 22 Apr 2002, Leif K-Brooks wrote: I use $formvar for form processing, I don't use the arrays. This is how I was taught to do it. If my host upgrades to 4.2.0, my website is as good as gone! What am I supposed to do?!

Re: [PHP] The so-called improvment in PHP 4.2.0

2002-04-23 Thread Rouvas Stathis
Erik Price wrote: On Tuesday, April 23, 2002, at 06:48 AM, Rouvas Stathis wrote: This change improves your security, so it'd be rational to be happy about it. No it doesn't. It just provides another excuse for lazy programming. Nothing will save a lazy programmer or one that

Re: [PHP] The so-called improvment in PHP 4.2.0

2002-04-23 Thread Erik Price
On Tuesday, April 23, 2002, at 11:46 AM, Rouvas Stathis wrote: Preventing namespace pollution...now you convince me. I used the term lazy programming without explaining what I meant, hence the misunderstanding. I refer to lazy programming in the sense of not properly and thoroughly

Re: [PHP] The so-called improvment in PHP 4.2.0

2002-04-23 Thread Rouvas Stathis
Miguel Cruz wrote: On Tue, 23 Apr 2002, Rouvas Stathis wrote: Miguel Cruz wrote: On Mon, 22 Apr 2002, Leif K-Brooks wrote: I use $formvar for form processing, I don't use the arrays. This is how I was taught to do it. If my host upgrades to 4.2.0, my website is as good as gone!

Re: [PHP] The so-called improvment in PHP 4.2.0

2002-04-22 Thread Adam Voigt
Umm, use $_POST or $_GET or $_REQUEST from now on. Adam Voigt [EMAIL PROTECTED] On Mon, 22 Apr 2002 17:10:34 -0400, Leif K-Brooks [EMAIL PROTECTED] wrote: I use $formvar for form processing, I don't use the arrays. This is how I was taught to do it. If my host upgrades to 4.2.0, my website

RE: [PHP] The so-called improvment in PHP 4.2.0

2002-04-22 Thread Alok K. Dhir
Change your scripts. It's relatively easy to cause variables in the superglobal arrays to be set in the global namespace. Code samples for this appear in various places in the the user contributed notes in the PHP documentation. A quick and dirty working example: foreach

Re: [PHP] The so-called improvment in PHP 4.2.0

2002-04-22 Thread Eugene Lee
On Mon, Apr 22, 2002 at 05:10:34PM -0400, Leif K-Brooks wrote: : : I use $formvar for form processing, I don't use the arrays. This is how I : was taught to do it. If my host upgrades to 4.2.0, my website is as good as : gone! What am I supposed to do?! Learn the new method. Or RTFM.

Re: [PHP] The so-called improvment in PHP 4.2.0

2002-04-22 Thread Leif K-Brooks
The only problem with that is that I have at least 50 scripts that are using the old thing! on 4/22/02 5:14 PM, Adam Voigt at [EMAIL PROTECTED] wrote: Umm, use $_POST or $_GET or $_REQUEST from now on. Adam Voigt [EMAIL PROTECTED]

RE: [PHP] The so-called improvment in PHP 4.2.0

2002-04-22 Thread Rasmus Lerdorf
Also see extract() and import_request_variables() Although, an upgrade to PHP 4.2.0 is not going to automatically disable register_globals. Upgrading PHP does not overwrite the existing php.ini file, so unless you ISP specifically changes this php.ini setting, nothing will change. -Rasmus On

Re: [PHP] The so-called improvment in PHP 4.2.0

2002-04-22 Thread Rodolfo Gonzalez
On Mon, 22 Apr 2002, Leif K-Brooks wrote: The only problem with that is that I have at least 50 scripts that are using the old thing! You could auto_prepend the file which has the code for backwards compatibility of the variables. -- PHP General Mailing List (http://www.php.net/) To

Re: [PHP] The so-called improvment in PHP 4.2.0

2002-04-22 Thread Miguel Cruz
On Mon, 22 Apr 2002, Leif K-Brooks wrote: I use $formvar for form processing, I don't use the arrays. This is how I was taught to do it. If my host upgrades to 4.2.0, my website is as good as gone! What am I supposed to do?! Fix them! This direction was first announced in 4Q1999; 2.5 years