Voting

The Note You're Voting On

23 years ago

If you care about security, you are better of setting 



register_globals = off

enable_track_vars = on (Always on from PHP4.0.3)



Default setting for variable order is 

EGPCS 

(ENV VARS/GET VARS/POST VARS/COOKIE VARS/SESSION VARS)



Imagine if you are rely on ENV VAR but it was orver written with GET/POST/COOKIE vars?

<< Back to user notes page