[UPHPU] $GLOBALS and global best practices

Daniel C. dcrookston at gmail.com
Mon Nov 7 15:05:06 MST 2011


On Mon, Nov 7, 2011 at 4:30 PM, Steve Meyers <steve-uphpu at spamwiz.com> wrote:
> That assumes that you have register_globals enabled, which implies that you
> don't care about security anyway.

Not necessarily.  The old import() function appears to be gone (thank
goodness) but we still have import_request_variables() and extract()
which appear somewhat better than import() but could still potentially
land you in the same boat:

http://us.php.net/manual/en/function.import-request-variables.php
http://us.php.net/manual/en/function.extract.php

-Dan


More information about the UPHPU mailing list