|
|
Posted by Sanders Kaufman on 02/07/07 17:38
Vincent Delporte wrote:
> On Wed, 7 Feb 2007 11:24:23 +0200, "P Pulkkinen"
>> If you put register_globals = off, and use $_request, $_get, $_post and
>> $_cookie, you'll surely know where your variables come from.
>
> Why is it dangerous to use globals, and not know where the data came
> from?
Suppose I have register globals turned ON, and I have a regular
old variable called "$bCreditCardApproved = FALSE;".
By putting "?bCreditCardApproved=TRUE" in the query string, I
might muck things up for your code logic.
Navigation:
[Reply to this message]
|