register Global on or off

[vikal]

hi

 

good afternoon

 

now just help

 

does it make any sence if i started to customize oscommerce by turning on register global

 

or turning off the register global

 

well

 

i am not turning on register global...does it harm to my site

 

please make me clear on both aspect of register global on or off

 

 

regards

 

vikaL

[spooks]

Keep register globals off.

Some of the vulnerabilities are:

user is able to set variable within url ie set $paid=true

user is able to call includes pages with url

there is more, just search. lots like: http://www.oscommerce.com/forums/lofiversion/i...hp?t257556.html

http://www.oscommerce.com/community/contributions,2097

Control with phpini or htaccess or speak to host

[vikal]

Keep register globals off.

Some of the vulnerabilities are:

user is able to set variable within url ie set $paid=true

user is able to call includes pages with url

there is more, just search. lots like: http://www.oscommerce.com/forums/lofiversion/i...hp?t257556.html

http://www.oscommerce.com/community/contributions,2097

Control with phpini or htaccess or speak to host

 

 

hi thanks

 

if someone starting works with registering global on

 

then this contribute works..

 

i have cheked it..

 

simple but good

 

thanks

 

regards

 

vikaL