> From: Joseph Crawford <[EMAIL PROTECTED]>
> 
> correct me if i am wrong but i have been told it is bad and insecure
> to use register_global=on

You are wrong. :)

Having register_globals OFF helps to prevent poorly written programs from being 
vulnerable to users setting variables in the URL/header/cookie data. You can 
still write horribly insecure programs with register_globals OFF. You can 
easily write very secure programs that function with register_globals ON or 
OFF, too. 

---John Holmes...

UCCASS - PHP Survey System
http://www.bigredspark.com/survey.html

-- 
PHP Database Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to