[Resolved] [Resolved] register_globals ON or OFF

[conjurer]

I am starting back into the Welling and Thomson book on MySQL and PHP.

On the first form exercise they had one type in the variables using a short version, i.e., $tireqty, $oilqty, etc.

This produced an error when I first ran it, but then I saw the note in the book that this short style for form variable only works if you set register_globals to ON.

So I changed my php.ini and it works. BUT there is a cautionary note in the PHP.ini file that you maybe should not set register_globals to ON for security reasons.

I am not too worried about the security issues of running this stuff local, but if I get proficient enough to have something I port out to my webserver then I am wondering if this is going to be a problem. Are most hosts setting register_globals to off and if so would it be better for me to just learn to use the long version for accessing form variables.

Suggestions.

Thanks :rolleyes:

[Brad_loo]

You should always code for register_globals begin off now a days. It was truned off by default in php because it poses a security risk, however most hosts will turn them back on at user request incase one of their scripts isent working with it off.

You can see if your host has register_globals on or off by uploading a .php with these contents to your server then running it:

<?php

	phpinfo();
	exit;
?>

At any rate you should code for register_globals off, its good pratice.

[The_Chancer]

With globals off ( a very good idea... ) you can access things set by various ways...

In a posted form (hidden from user ) $POST['variable']
In a GET form (in the URL) $GET['variable']
In a session variable $SESSION['variable']
In a cookie $COOKIE['variable']

Get the idea ? Look at global variables in www.php.net

[stolzyboy]

and even if having register_globals = On, i still access all my vars with the $POST, $GET, etc... method, that way I KNOW for sure where my variables are coming from, so I don't have to worry about insertion attacks or forbidden access to places i want secure

[The_Chancer]

True - and safeguards against upgrade and improves portability..