|
|
Posted by Geoff Berrow on 12/06/06 09:13
Message-ID: <lb2dnbcO6NE30OvYnZ2dnUVZ_qOdnZ2d@comcast.com> from Jerry
Stuckle contained the following:
>> So - as long as I explicitly reference $_SESSION[] when continuing a
>> session, I'm not subject to the security vulnerabilities of
>> register_globals, right?
>>
>
>True - but ANY misstep can be disastrous. The problem is,
>
>$i = $MyVar;
>
>doesn't cause an error of $MyVar hasn't been explicitly assigned a value
>in your code, but it is in the $_SESSION, $_POST, $_GET or $_COOKIES
>(forgot the last one)
$_REQUEST ?
--
Geoff Berrow (put thecat out to email)
It's only Usenet, no one dies.
My opinions, not the committee's, mine.
Simple RFDs http://www.ckdog.co.uk/rfdmaker/
Navigation:
[Reply to this message]
|