[RESOLVED] Undefined index:

[mark_kccs]

Hi

I have error reporting set to all and have a script that tells me:

Notice: Undefined index:....

I understand that this may be due to referencing undeclared variables and setting the error level will stop them from being displayed.

My question is, what would be the outcome if I left this as is to the security of the site and the db overhead etc?

I fully intend to resolve this so please do not feel the need to comment that it must be done, I simply would like to know the above.

Many thanks

[NogDog]

I would suspect that in the large majority of cases, such a situation is not a security problem, but it could be depending on the usage and the configuration. In particular I'm thinking that if register_globals is on and that variable were supplied by a hacker in the URL query string (or post data or cookie), something not nice could possibly happen. Mostly, though, I think it's mainly an issue of alerting you to the fact that the code is referencing an unset variable which may be no problem (other than being a bit "sloppy") but might also indicate a spelling mistake or logic error that you need to look into.

[mark_kccs]

Many thanks NogDog, appreciate the advice.