Posted by Rik Wasmus on 06/15/03 12:00

On Tue, 15 Jan 2008 02:40:03 +0100, Kurda Yon <kurdayon@yahoo.com> wrote:

>> That's how it's supposed to work yes, if the starting script is there.
> I am not so familiar with the terminology. What do you understand
> under the "starting script"?
>
>
>> Keep in mind that if the requests originates from somewhere else with
>> register_globals on possible includes from this dir will also have it
>> enabled.
> Do you mean "user request of a php page" or something else? If first,
> what do you understand under "request originates from a directory"?


Look at it like this, in example.com you have 3 dirs, with each a file:
/dir, which holds script.php
/dir/sub, which has a .htaccess file
/dir/sub/foo which holds otherscript.php

If the user enter with the url example.com/dir/sub/foo/otherscript.php,
register globals will be off, if the user enters with the url
example.com/dir/script.php, and that include()'s otherscript.php, the
entire code in both files will be run wi8th register global on.
--
Rik Wasmus

[Back to original message]