register_globals question

[macca_25]

Hi all,
I currently have register_globals = off.
I have aquired a script that was written to run with register_globals on.
Is there a way to quickly resolve this? I don't want to turn register_globals on, and i don't want to change every variable from $var to $_POST['var'], so is there a way to put some code into my pages to do this for me?
Cheers,
macca

[Mordecai]

It will definately be best for you to rewrite that script, but as a temporary fix, you could use something like:

foreach ($_REQUEST as $key=>$val) {
  $$key = $val;
}

Note that I used $_REQUEST rather than $POST, just to be sure it also includes $GET and $_COOKIE values.

[macca_25]

Thanks Mordecai, that works just fine.
Is there any reason why i shouldn't use your solution as a permanent fix?
Cheers,
macca

[Weedpacket]

Originally posted by macca_25
Thanks Mordecai, that works just fine.
Is there any reason why i shouldn't use your solution as a permanent fix?
Cheers,
macca

A permanent fix would be to upgrade your scripts. (By the way; [man]extract[/man] has much the same effect.)

[Mordecai]

Originally posted by macca_25
Is there any reason why i shouldn't use your solution as a permanent fix?

There's a whole section on register_globals in the [man]security[/man] chapter of the manual, it may be a good read.