Menu
Community /Pin to ProfileBookmark
@NogDogApr 14.2008 — #The only functional difference of which I am aware is that the $HTTP_* versions are not "super-global", while the $_POST type vars are. I.e.: $_POST is automatically available in any scope, whereas $HTTP_POST_VARS would have to be declared as global within a function/method definition before it can be accessed.@NogDogApr 15.2008 — #I am not aware of any such risk. Besides, as far as I know from all the php.net literature, the newer, "super-global" versions are the preferred method of accessing such external data, and as such should be used instead of $HTTP_* variables, and also instead of [url=http://www.php.net/register_globals]register_globals[/url] variables (preferably with register_globals disabled so that they are not even an option).
Also, neither the $HTTP_* variables nor register_globals will be available at all in PHP 6.
Register Long Arrays question
I’m updating an old web-based license key generator for some new products of ours (used only by our on-site tech guys). Anyway the original script used HTTP_POST_VARS instead of just _POST, so I just changed it all to
Anyway the original author guy came by to check it out and saw I was using the “shorthand” (preferred method from what I’ve always heard) _POST vars, and he said something along the lines of “Oh, your disabling some of the new security features that way”. I’ve never heard of any security issues using $
Sign in
to post a comment4 Comments(s) ↴
0
@NogDogApr 14.2008 — #The only functional difference of which I am aware is that the $HTTP_* versions are not "super-global", while the $_POST type vars are. I.e.: $_POST is automatically available in any scope, whereas $HTTP_POST_VARS would have to be declared as global within a function/method definition before it can be accessed.0
@NogDogApr 15.2008 — #I am not aware of any such risk. Besides, as far as I know from all the php.net literature, the newer, "super-global" versions are the preferred method of accessing such external data, and as such should be used instead of $HTTP_* variables, and also instead of Also, neither the $HTTP_* variables nor register_globals will be available at all in PHP 6.