Posted by Kurda Yon on 01/14/08 19:33

OK. But, what is the problem with the "turned on register_globals"? I
read about the problem here:
http://shsc.info/ShittyPHPFeatures

And they explain the problem by the following example:
if ($_COOKIE['adminpassword'] == 'secret')
$admin = TRUE;
....
if ($admin) destroy_website();

If somebody load the website like that:
website.php?admin=1
the website will be destroyed.

But I do not understand how the given example is related with the
global variables? The described example will be a problem even if the
$admin is NOT a global variable. Isn't?

• Next in forum: Re: How to call the session variable?
• Prev in forum: Re: newbie help with mysql_fetch_array
• Thread view: Re: How to call the session variable?

[Reply to this message]