register_globals

[spin]

Hi guys,

I am coding a CMS now, and would like to know if I should direct my attention to users that have register_globals on. Is it worth the effort to code the project so that it supports the setting turned on ? Or should I make a condition in the installer script to see whether it's turned on - in that case cancel the installation or if it's turned off - carry on.

[drew010]

register_globals is off by default. for security AND portability, just use all the superglobal arrays $POST $GET $SESSION $COOKIE etc for accessing those variables. then it wont matter if its off or on.

[spin]

thanks drew010 🙂