|
|
Posted by Gordon Burditt on 02/25/06 01:50
>i've discovered (on my server) that it doesn't seem to be necessary to
>call data from a form via $_POST, or to retrieve cookies via $_COOKIE,
>and other such things; they are available by name alone. however, i've
register_globals is a security problem. Don't write code that
depends on it.
>heard that just because you CAN do something, doesn't mean you SHOULD.
>my question: is this considered bad practice?
Yes. And you'll probably find some hosting companies that
WILL NOT turn on register_globals for any price.
Gordon L. Burditt
Navigation:
[Reply to this message]
|