Re: PHP and "Register_Globals"

My favorite solution is to write a registration module at the beginning of a file (and use include_once) to extract the cookie/session/Get/Post values in whatever order you want to declare. This can be used to override settings which could also cause unexpected behavior in your application.

See http://www.php.net/manual/en/function.extract.php for more details on the extract command. You can write such a module to your own specifications. This can also be used to prevent non-standard ordering of registering globals from causing unexpected behavior in your application.

Best Wishes,
Chris Travers

• Original Message ----- From: "Ulrich P." <spam@wir-sind.org> To: <webappsec@securityfocus.com> Sent: Saturday, March 29, 2003 9:57 AM Subject: PHP and "Register_Globals"

> hello,
problems.
>
> my question is now: my app is 'safe', but what do I do if my future
Received on Sat Mar 29 17:45:32 2003