From: Yasuo Ohgaki Date: Tue, 5 Feb 2002 06:31:53 +0000 (+0000) Subject: register_globals=off is defualt for 4.2.0 X-Git-Tag: php-4.2.0RC1~420 X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=0bf51b81bddf7ac0b6666f896cb32fe9c137c5f2;p=php register_globals=off is defualt for 4.2.0 --- diff --git a/main/main.c b/main/main.c index e6844cc941..b770ccfe3e 100644 --- a/main/main.c +++ b/main/main.c @@ -230,7 +230,7 @@ PHP_INI_BEGIN() STD_PHP_INI_ENTRY("output_buffering", "0", PHP_INI_PERDIR|PHP_INI_SYSTEM,OnUpdateInt, output_buffering, php_core_globals, core_globals) STD_PHP_INI_ENTRY("output_handler", NULL, PHP_INI_PERDIR|PHP_INI_SYSTEM,OnUpdateString, output_handler, php_core_globals, core_globals) STD_PHP_INI_BOOLEAN("register_argc_argv", "1", PHP_INI_ALL, OnUpdateBool, register_argc_argv, php_core_globals, core_globals) - STD_PHP_INI_BOOLEAN("register_globals", "1", PHP_INI_ALL, OnUpdateBool, register_globals, php_core_globals, core_globals) + STD_PHP_INI_BOOLEAN("register_globals", "0", PHP_INI_ALL, OnUpdateBool, register_globals, php_core_globals, core_globals) #if PHP_SAFE_MODE STD_PHP_INI_BOOLEAN("safe_mode", "1", PHP_INI_SYSTEM, OnUpdateBool, safe_mode, php_core_globals, core_globals) #else diff --git a/php.ini-dist b/php.ini-dist index dffd8e0d55..8c72efc889 100644 --- a/php.ini-dist +++ b/php.ini-dist @@ -309,7 +309,7 @@ variables_order = "EGPCS" ; You should do your best to write your scripts so that they do not require ; register_globals to be on; Using form variables as globals can easily lead ; to possible security problems, if the code is not very well thought of. -register_globals = On +register_globals = Off ; This directive tells PHP whether to declare the argv&argc variables (that ; would contain the GET information). If you don't use these variables, you