problem with the official php' manual

[jrss]

sorry for my english.
I've got a big problem with this words of the PHP manual:

Before PHP 4.3, if you are using $_SESSION and you have disabled register_globals, don't use session_register(), session_is_registered() or session_unregister().

...
and more in the session_register' reference.

I've got a PHP 4.2.2 with register_globals = OFF.
The structure of my php pages is like this:
page1.php
<?php
session_register("var1");
$_SESSION["var1"]="hello";
?>

page2.php
<?php
session_register("var1");
echo $_SESSION["var1"]; //this prints "hello"
?>

This pages works but the manual says that it musn´t works. WHY???

thx 🙂

[laserlight]

The manual doesnt say that that should not work - it says that that is not advisable due to a potential security problem (variable poisoning as per the use of register_globals set to on).

[PHPdev]

Something else to consider is that session_register() makes an implicit call the session_start().

Thus what you should really be doing is:

session_start();
$_SESSION['var1'] = "HELLO";

and

session_start();
echo $_SESSION['var1'];