Re: A question about refresh

Message-ID	<2049253.lGaqSPkdTl@PointedEars.de> (permalink)
From	Thomas 'PointedEars' Lahn <PointedEars@web.de>
Organization	PointedEars Software (PES)
Date	2011-05-14 09:31 +0200
Subject	Re: A question about refresh
Newsgroups	comp.lang.javascript, comp.lang.php
References	<iqjvks$jff$1@dont-email.me> <iqjvn8$jh0$1@dont-email.me> <4241969.rdbgypaU67@PointedEars.de> <iqk4ao$58n$1@dont-email.me>
Followup-To	comp.lang.php

Cross-posted to 2 groups.

Followups directed to: comp.lang.php

Show all headers | View raw

sheldonlg wrote:

> Thomas 'PointedEars' Lahn wrote:
>> sheldonlg wrote:
>>> ...and BTW, if it means anything it is written with php4 code and
>>> register_globals=on.  (Can't be changed).
>>
>> It would better be changed soon, before it is too late.
> 
> Not my call!

What kind of developer are you anyway?  No, don't answer.

> Besides, this is an INTRAnet application, 

Irrelevant.

> so all users are known.

All users are … listen to yourself!

> There is no way they are going to revamp everything in this
> massive application.

Then they deserve what they will get.

> It still uses the feature that there are variables that are the same name
> as the fields automatically without using gets or posts.

  foreach(array('x', 'y', 'z') as $var)
  {
    $$var = $_REQUEST[$var];
  }

does the same without compromising all security, preferably in local context 
(you might want to exclude $_COOKIE, though).


F'up2 comp.lang.php

PointedEars
-- 
Use any version of Microsoft Frontpage to create your site.
(This won't prevent people from viewing your source, but no one
will want to steal it.)
  -- from <http://www.vortex-webdesign.com/help/hidesource.htm> (404-comp.)

Back to comp.lang.php | Previous | Next | Find similar | Unroll thread

Thread

Re: A question about refresh Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2011-05-14 09:31 +0200

csiph-web