Posted by Michael Fesser on 07/25/07 18:52

..oO(Jerim)

>I am working on some legacy code that has been through several hands
>over the years. The gist of it is that there is a "Register" button on
>our website, that goes to a redirect page, that then calls a page that
>displays our registration form. The URL the Register button uses
>includes passing a variable. For instance, lets say the URL is
>http://www.website.com/register.php?code=01
>
>The thing is that on register.php there is no POST, GET or SESSION
>anywhere. [...]

In older versions of PHP variables such variables were automatically
imported into the global scope. This was called register_globals.
Without any further action there would have been a global variable $code
with the value '01'.

In recent PHP this "feature" is disabled for security reasons, in PHP 6
it will be dropped completely.

Micha

[Back to original message]