Path: csiph.com!x330-a1.tempe.blueboxinc.net!usenet.pasdenom.info!gegeweb.org!usenet-fr.net!feeder1-2.proxad.net!proxad.net!feeder2-2.proxad.net!newsfeed.arcor.de!newsspool3.arcor-online.net!news.arcor.de.POSTED!not-for-mail
Content-Type: text/plain; charset="UTF-8"
Message-ID: <2049253.lGaqSPkdTl@PointedEars.de>
From: Thomas 'PointedEars' Lahn <PointedEars@web.de>
Reply-To: Thomas 'PointedEars' Lahn <cljs@PointedEars.de>
Organization: PointedEars Software (PES)
Date: Sat, 14 May 2011 09:31:19 +0200
User-Agent: KNode/4.4.7
Content-Transfer-Encoding: 8Bit
Subject: Re: A question about refresh
Newsgroups: comp.lang.javascript,comp.lang.php
References: <iqjvks$jff$1@dont-email.me> <iqjvn8$jh0$1@dont-email.me> <4241969.rdbgypaU67@PointedEars.de> <iqk4ao$58n$1@dont-email.me>
Followup-To: comp.lang.php
MIME-Version: 1.0
Lines: 46
NNTP-Posting-Date: 14 May 2011 09:31:20 CEST
NNTP-Posting-Host: 99f139bf.newsspool2.arcor-online.net
X-Trace: DXC=^EA=4N82^m=T2Rfi6<W9f5A9EHlD;3Yc24Fo<]lROoR18kF<OcfhCO;ke1UBKg=c19DZm8W4\YJN<T<8F<]0D<`9bC>64_i^AK4he6d2;dIaf>
X-Complaints-To: usenet-abuse@arcor.de
Xref: x330-a1.tempe.blueboxinc.net comp.lang.javascript:2077 comp.lang.php:1589

sheldonlg wrote:

> Thomas 'PointedEars' Lahn wrote:
>> sheldonlg wrote:
>>> ...and BTW, if it means anything it is written with php4 code and
>>> register_globals=on.  (Can't be changed).
>>
>> It would better be changed soon, before it is too late.
> 
> Not my call!

What kind of developer are you anyway?  No, don't answer.

> Besides, this is an INTRAnet application, 

Irrelevant.

> so all users are known.

All users are … listen to yourself!

> There is no way they are going to revamp everything in this
> massive application.

Then they deserve what they will get.

> It still uses the feature that there are variables that are the same name
> as the fields automatically without using gets or posts.

  foreach(array('x', 'y', 'z') as $var)
  {
    $$var = $_REQUEST[$var];
  }

does the same without compromising all security, preferably in local context 
(you might want to exclude $_COOKIE, though).


F'up2 comp.lang.php

PointedEars
-- 
Use any version of Microsoft Frontpage to create your site.
(This won't prevent people from viewing your source, but no one
will want to steal it.)
  -- from <http://www.vortex-webdesign.com/help/hidesource.htm> (404-comp.)