View Single Post

  #31 (permalink)  
Old 12-06-2006
Geoff Berrow
 
Posts: n/a
Default Re: Session Management for Newbie

Message-ID: <lb2dnbcO6NE30OvYnZ2dnUVZ_qOdnZ2d@comcast.com> from Jerry
Stuckle contained the following:

>> So - as long as I explicitly reference $_SESSION[] when continuing a
>> session, I'm not subject to the security vulnerabilities of
>> register_globals, right?
>>

>
>True - but ANY misstep can be disastrous. The problem is,
>
>$i = $MyVar;
>
>doesn't cause an error of $MyVar hasn't been explicitly assigned a value
>in your code, but it is in the $_SESSION, $_POST, $_GET or $_COOKIES
>(forgot the last one)


$_REQUEST ?

--
Geoff Berrow (put thecat out to email)
It's only Usenet, no one dies.
My opinions, not the committee's, mine.
Simple RFDs http://www.ckdog.co.uk/rfdmaker/
Reply With Quote