Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.php > #14655

Re: php challenge

From "Christoph M. Becker" <cmbecker69@arcor.de>
Newsgroups comp.lang.php
Subject Re: php challenge
Date 2014-11-27 21:12 +0100
Organization solani.org
Message-ID <m580i8$cph$1@solani.org> (permalink)
References <aea937c1-40e4-4b95-9857-8492730248de@googlegroups.com> <m57rt5$s2e$1@solani.org> <m57td8$uqd$1@dont-email.me>

Show all headers | View raw

Jerry Stuckle wrote:

>> If register_globals[1]=On that would be easy (because $loggedIn is not
>> necessarily initialized, and it is tested for being == true, instead of
>> === true).  Fortunately, that misfeature had been removed as of PHP 5.4.
>>
>> [1] <http://php.net/manual/en/security.globals.php>
> 
> And has been recommended AGAINST use for several years now, for this
> very reason.

IMO the possibility to set global variables from user input should have
never been introduced in the first place; it's even slightly more insane
than automatically escaping user input (magic_quotes_*).

-- 
Christoph M. Becker

Back to comp.lang.php | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

php challenge Kiuhnm Mnhuik <gandalf23@mail.com> - 2014-11-27 09:12 -0800
  Re: php challenge Jerry Stuckle <jstucklex@attglobal.net> - 2014-11-27 13:40 -0500
    Re: php challenge Kiuhnm Mnhuik <gandalf23@mail.com> - 2014-11-27 11:31 -0800
      Re: php challenge Jerry Stuckle <jstucklex@attglobal.net> - 2014-11-27 15:27 -0500
        Re: php challenge Kiuhnm Mnhuik <gandalf23@mail.com> - 2014-11-27 15:55 -0800
          Re: php challenge Jerry Stuckle <jstucklex@attglobal.net> - 2014-11-27 20:35 -0500
            Re: php challenge Kiuhnm Mnhuik <gandalf23@mail.com> - 2014-11-27 19:16 -0800
              Re: php challenge Jerry Stuckle <jstucklex@attglobal.net> - 2014-11-28 09:10 -0500
                Re: php challenge Kiuhnm Mnhuik <gandalf23@mail.com> - 2014-11-28 12:52 -0800
                Re: php challenge Jerry Stuckle <jstucklex@attglobal.net> - 2014-11-28 16:32 -0500
  Re: php challenge "Christoph M. Becker" <cmbecker69@arcor.de> - 2014-11-27 19:52 +0100
    Re: php challenge Jerry Stuckle <jstucklex@attglobal.net> - 2014-11-27 14:18 -0500
      Re: php challenge "Christoph M. Becker" <cmbecker69@arcor.de> - 2014-11-27 21:12 +0100
        Re: php challenge Jerry Stuckle <jstucklex@attglobal.net> - 2014-11-27 15:28 -0500
    Re: php challenge Kiuhnm Mnhuik <gandalf23@mail.com> - 2014-11-27 12:00 -0800
      Re: php challenge Jerry Stuckle <jstucklex@attglobal.net> - 2014-11-27 15:30 -0500
        Re: php challenge Kiuhnm Mnhuik <gandalf23@mail.com> - 2014-11-27 15:02 -0800
          Re: php challenge Jerry Stuckle <jstucklex@attglobal.net> - 2014-11-27 20:36 -0500
            Re: php challenge Kiuhnm Mnhuik <gandalf23@mail.com> - 2014-11-27 19:18 -0800

csiph-web