Security issue

[DeepBlerg]

Hi,
I had trouble using such variables as $PHP_SELF etc on my new host and upon contacting them they said something about using global vars because its safer and just using $PHP_SELF etc posses a significant security risk.

Whats this all about? Does anyone know of any articles about this online?

Thanks.

 

[sleipnir214]

There is this comment from php.ini, right above the line turning register_globals on or off:

You should do your best to write your scripts so that they do not require register_globals to be on. Using form variables as globals can easily lead to possible security problems, if the code is not very well thought of.
______________________________________________________________________
TANSTAAFL!

 

[hads]

And here:

http://www.php.net/manual/en/security.registerglobals.php

01101000011000010110010001110011