|
|
Posted by "Richard Lynch" on 01/20/06 23:34
On Fri, January 20, 2006 9:32 am, David BERCOT wrote:
>> David BERCOT wrote:
>> > I've tried :
>> > $_SERVER["PHP_AUTH_USER"] = NULL;
>> > without succes...
>>
>> http://www.php.net/unset
>>
>> e.g. unset($_SERVER['PHP_AUTH_USER']);
>>
>> It might, however, be better practice to used an authorisation state
>> variable, or something similar, i.e.
>>
>> if (! $auth) {
>> // HTTP Headers
>> }
This kind of coding is EXACTLY what makes register_globals "ON" so
dangerous.
Avoid it at all costs.
If you don't understand why, start reading about register_globals at
http://php.net and keep reading until you DO understand it.
--
Like Music?
http://l-i-e.com/artists.htm
Navigation:
[Reply to this message]
|