22 Jan
2003
22 Jan
'03
3:30 p.m.
On Wed, Jan 22, 2003 at 02:18:24PM +0530, Amitay Isaacs wrote:
Use POST method only. Also turn the register_globals
off in the
configuration file. To access the variables which are posted
you can use the special variables.
I have lots of scripts which use $vaname directly. I understand the
security issues and will be programming future scripts with $_POST["varname"]
in future. But whats wrong in having GET instead of POST?
Is there a way by which I can change all the varaiables from
$_POST["varname"] to $varname. Any function that can transfer all the
variables from _POST to ones without _POST, I do not want to modify all the
scripts I have already written with $varname to $_POST["varname"].
$_POST["varname"]
Amitay.
--
Amish K. Munshi
In GNU we trust.