php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #20652 Can't get POST to work without register_globals = on
Submitted: 2002-11-26 10:38 UTC Modified: 2002-11-26 11:32 UTC
From: judd at ob-wan dot com Assigned:
Status: Not a bug Package: Scripting Engine problem
PHP Version: 4.2.3 OS: Win2K Server
Private report: No CVE-ID: None
View Developer Edit
 [2002-11-26 10:38 UTC] judd at ob-wan dot com 
Tried for days to figure why the tutorial I'm working with had so many apparent bugs. It was written against a beta PHP4 and apparently at that point register_globals = on in php.ini was standard.

This is both a bug and an education problem, since examples of "correct" security-conscious code are non-existent and newbies to PHP have no idea of what security issues are involved.

I can't upgrade to 4.2.3RC1 or CVS snapshot right now due to other issues.

Yes, this is known data (dupe of various other bug reports) but important enough to address with at least more documentation. Caused me about two lost days here.

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2002-11-26 11:32 UTC] jan@php.net 
In PHP 4.2.0, the 'register_globals' setting default changed to
'off'. See http://www.php.net/release_4_2_0.php for more info.
We are sorry about the inconvenience, but this change was a necessary
part of our efforts to make PHP scripting more secure and portable.
 
PHP Copyright © 2001-2026 The PHP Group
All rights reserved. 		Last updated: Wed Feb 04 20:00:02 2026 UTC