Posted by Kurda Yon on 06/17/41 12:00

>
> ..
> if( isset($admin) ) {
> ..}
>
> ..
>
> Now:http://mysite.net/myscript.php?admin=1
> Here we go.

But even if the register_global is off the following can happen:
if( isset($_GET['admin']) ) {
...}
Now:http://mysite.net/myscript.php?admin=1

Or the ideas is that developer (programmer) will remember that $_GET
is something what is coming from the outside and will never relate the
access with the elements of $_GET?

• Next in forum: Re: "register_globals off" and "session side-effect"
• Prev in forum: Re: "register_globals off" and "session side-effect"
• Thread view: Re: "register_globals off" and "session side-effect"

[Reply to this message]