On Lun 04 Nov 2002 19:55, Michael Rubin wrote:
> Why is it a bad idea to turn on "register globals" ?

Read Linux Journal of October. There is an article about security in PHP 
programming, which says why you should leave register_global off.

Basiclly, if you have a variable $query that makes a query (and I know that) 
in index.php, I could:

http://yoursite.com/index.php?query=evil+query

where evil query is something you don't want to happen.

-- 
Porqué usar una base de datos relacional cualquiera,
si podés usar PostgreSQL?
-----------------------------------------------------------------
Martín Marqués                  |        [EMAIL PROTECTED]
Programador, Administrador, DBA |       Centro de Telematica
                       Universidad Nacional
                            del Litoral
-----------------------------------------------------------------



-- 
redhat-list mailing list
unsubscribe mailto:redhat-list-request@;redhat.com?subject=unsubscribe
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to