Topic awaiting preservation: regarding register_globals in php (Page 1 of 1)

Hi there
I'm working with user authentication and sessions at the moment and my dev-enviroment has register_globals turned on. I know that opens a security hole that I'd like to avoid.
However, I don't know in advance if the server where this will reside has it turned off or on.
Is there any problems I can expect if I code for register_globals = off and they are turned on on the next server?
/Dan

{cell 260}
-{ a vibration is a movement that doesn't know which way to go }-

DmS: You could turn them off using php_flag in your .htaccess file:

php_flag register_globals off

However, I believe you have to have AllowOverride (in the config) set to Options (not None) so you might want to check if thats set up or can be easily changed.

Anyway I think thats right but you can always try it out and see

___________________
Emps

FAQs: Emperor

option b)
call, at the very begining of your script (for example, in your main include file),
these handy dandy functions.
They destroy all the globals that came in from the user.


function trashgets() //destroys the easy $varname passed by get. security measure.
{
global $HTTP_GET_VARS;
foreach ($HTTP_GET_VARS as $aKey => $aVar)
{
$aVar = trim(addslashes(strip_tags($aVar)));
unset($$aKey);
}
}

function trashposts() //destroys the easy $varnames passed by a post. security measure
{
global $HTTP_POST_VARS;
foreach ($HTTP_POST_VARS as $aKey => $aVar)
{
$aVar = trim(addslashes(strip_tags($aVar)));
unset($$aKey);
}
}
function trashcookies() //destroys the easy $varnames passed by a post. security measure
{
global $HTTP_COOKIE_VARS;
foreach ($HTTP_COOKIE_VARS as $aKey => $aVar)
{
$aVar = trim(addslashes(strip_tags($aVar)));
unset($$aKey);
unset($HTTP_COOKIE_VARS[$aKey]);
}
}

so long,

Tyberius Prime

Thanx both!
I'll look into it some more.
One thing is for sure, life in php-land is a lot easier with "register_globals = on" (either that, or I'm doing something wrong so far...).
Smart functions there TP Sometimes the simple ways are good ways!
/Dan

{cell 260}
-{ a vibration is a movement that doesn't know which way to go }-