Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.php > #1589 > unrolled thread

Re: A question about refresh

Back to article view | Back to comp.lang.php

This discussion starts older than the indexed window; earlier articles aren't shown. The article labeled Started by below is the oldest one visible, not the original post.

Contents

  Re: A question about refresh Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2011-05-14 09:31 +0200

#1589 — Re: A question about refresh

sheldonlg wrote:

> Thomas 'PointedEars' Lahn wrote:
>> sheldonlg wrote:
>>> ...and BTW, if it means anything it is written with php4 code and
>>> register_globals=on.  (Can't be changed).
>>
>> It would better be changed soon, before it is too late.
> 
> Not my call!

What kind of developer are you anyway?  No, don't answer.

> Besides, this is an INTRAnet application, 

Irrelevant.

> so all users are known.

All users are … listen to yourself!

> There is no way they are going to revamp everything in this
> massive application.

Then they deserve what they will get.

> It still uses the feature that there are variables that are the same name
> as the fields automatically without using gets or posts.

  foreach(array('x', 'y', 'z') as $var)
  {
    $$var = $_REQUEST[$var];
  }

does the same without compromising all security, preferably in local context 
(you might want to exclude $_COOKIE, though).


F'up2 comp.lang.php

PointedEars
-- 
Use any version of Microsoft Frontpage to create your site.
(This won't prevent people from viewing your source, but no one
will want to steal it.)
  -- from <http://www.vortex-webdesign.com/help/hidesource.htm> (404-comp.)

[toc] | [standalone]

Back to top | Article view | comp.lang.php

csiph-web