Posted by Michael Fesser on 01/14/08 16:27

..oO(Peter Pei)

>You are obviously right, and that's exactly what I have said all the time in
>every threads I partricipated. Did you get yourself familiar with the
>context before you jump in?

Sure I do, even if all your postings are without any context. You also
claimed that register_globals is broken in PHP 5.2.5, which in fact it
isn't.

>If you did, you could have saved yourself some precious time instead of
>coming up with sample code that we all know. Jerry's problem is that he
>insisted that $_SESSION['a'] and $a are unrelated regardless whether
>register_global is on.

Wrong again. Do _you_ read what you're replying to? He said:

| It used to - there is a parm in the php.ini file called
| register_globals.
|
| In earlier versions, this was enabled and would do what you want.
| However, this is a huge security risk and has been disabled by default
| in recent versions.

The rest of the sub thread was based on that, no need to repeat it over
and over again. Additionally register_globals are dead, so it makes
perfect sense to say that $_SESSION['foo'] and $foo are not related in
any kind, because that's how it is by default (since years!) and on
every properly configured system.

Micha

[Back to original message]