PHP -register_globals issue

I've run into this problem for people quite a few time. Seems there are many broken scripts out there thanks to register_globals. Here is a brief explanation of what happens and why it had to change.Still working the kinks out of this but the videos are getting better.

Category:

Education

Tags:

• php

[ucctelecom]

Thanks, very well explained.

[napsteren]

When register_globals is enabled, PHP will automatically create variables in the global scope for any value passed in GET, POST or COOKIE. This, combined with the use of variables without initialization, has lead to numerous security vulnerabilities. Since application developers should be aware when accessing tainted user input, it is better practice to access the variables through their respective super globals.