Re: Re: [PHP-DB] Re: sessions

2004-12-11 Thread John Holmes
> From: Joseph Crawford <[EMAIL PROTECTED]> > > correct me if i am wrong but i have been told it is bad and insecure > to use register_global=on You are wrong. :) Having register_globals OFF helps to prevent poorly written programs from being vulnerable to users setting variables in the URL/hea

RE: Re: [PHP-DB] Re: sessions

2004-12-13 Thread Norland, Martin
> -Original Message- > From: John Holmes [mailto:[EMAIL PROTECTED] > You are wrong. :) > > Having register_globals OFF helps to prevent poorly written programs from being vulnerable to > users setting variables in the URL/header/cookie data. You can still write horribly insecure > progr