If your webhosting turned register-globals off and you are still using a script/software which requires register-globals on you have a problem. But there is an easy solution: Just put this code at the top of your php script(s). Attention!!! "register_globals=on" means a huge security risk. Do not turn it on unless you know what are you doing!
Technorati Profile
foreach(array($_GET, $_POST, $_COOKIE) as $k=>$v){
foreach($v as $k2=>$v2){
$$k2 = $v2;
}
}
You can improve this to build a small web-firewall and prevent sql-injection etc. You can add some code and strip unwanted html-javascript tags with this.
- Log in to post comments
or just use:
extract($_REQUEST);
Opinion
The best books search in electronic libraries. Searches in a huge amount of libraries, many new submitions every day.
Having register_globals = on
Having register_globals = on does not mean a huge security risk. Also, the provided code does not emulate it properly so instead consider using an example from the manual:
http://php.net/manual/en/faq.misc.php#faq.misc.registerglobals