I currently run PHP 5.0.3 and I have tried to keep the same (or similar) ./configure string since the old PHP3 days to make sure that none of our old crud is broken.
I'm trying to figure out what --enable-track-vars does and I can't seem to find the information I need on php.net (maybe I am not looking hard enough).
What does it do? I feel embarassed asking such a question, as I should remember. Thanks!!
enable-track-vars determines whether or not PHP will fill up the $GET/$POST arrays with the user submitted data.
is there ever a reason to not have $GET, $POST, etc. filled up with user-submitted data? or is this the default behavior and ./configure --enable-track-vars not needed?
Thanks for your response. We are about to install a copy of our web-based software at another company's server and I wanted to be completely sure that option is necessary and not a security risk before requesting it with full confidence.
Originally posted by Bloodwine
is there ever a reason to not have $GET, $POST, etc. filled up with user-submitted data?
...if your app doesn't deal with user submitted data
Again, thanks for the response. I was just making sure that --enable-track-vars wasn't frowned upon like --enable-magic-quotes or register-globals = on