English Deutsch Français Italiano Español Português 繁體中文 Bahasa Indonesia Tiếng Việt ภาษาไทย
All categories

why do not turn on the register varible in php?



thanks

2007-12-09 13:44:09 · 2 answers · asked by Anonymous in Computers & Internet Programming & Design

2 answers

With register_globals ON your site is much more subject to cross site scripting. This allows someone to inject code into the url line which can allow malicious scripts to get placed on your server! So its best not to use those. Here is a longer explanation
http://www.php.net/releases/4_1_0.php
and
http://www.itc.virginia.edu/desktop/web/php4registerglobal.html

Hope that helps. Merry Christmas and God bless

2007-12-09 15:09:01 · answer #1 · answered by Tracy L 7 · 1 0

well, the easiest way would be to switch on register_globals from php.ini. In code version has not worked on my servers

2007-12-09 21:52:51 · answer #2 · answered by secrgb 1 · 0 0

fedest.com, questions and answers