Beau
08-11-2007, 07:25 AM
Was just googling around, and found this on Slashdot:
PHP is already being used for a long time, creating a big user base, but also a lot of bad habits. Bad habits often result in slow scripts or even security holes. But these bad habits are not always the cause of the developer. Of course, he (lets just assume were dealing with a stereotype developer here for simplicity's sake) is the one whos using it in his application, but sometimes the developer is not even aware hes using it.
Im, of course, talking about the register_globals (http://php.net/manual/en/security.globals.php) [php.net], magic_quotes (http://php.net/manual/en/security.magicquotes.php) [php.net] and safe_mode (http://php.net/manual/en/features.safe-mode.php) [php.net] functions. These three functions are hell for every PHP programmer so Im sure everyone will be happy to hear that these functions will disappear in PHP 6.
register_globals and safe_mode are good news. magic_quotes is good, but I think it may break a few things, security wise with some peoples scripts, who aren't adding addslashes() to their database queries already.
Discuss!
PHP is already being used for a long time, creating a big user base, but also a lot of bad habits. Bad habits often result in slow scripts or even security holes. But these bad habits are not always the cause of the developer. Of course, he (lets just assume were dealing with a stereotype developer here for simplicity's sake) is the one whos using it in his application, but sometimes the developer is not even aware hes using it.
Im, of course, talking about the register_globals (http://php.net/manual/en/security.globals.php) [php.net], magic_quotes (http://php.net/manual/en/security.magicquotes.php) [php.net] and safe_mode (http://php.net/manual/en/features.safe-mode.php) [php.net] functions. These three functions are hell for every PHP programmer so Im sure everyone will be happy to hear that these functions will disappear in PHP 6.
register_globals and safe_mode are good news. magic_quotes is good, but I think it may break a few things, security wise with some peoples scripts, who aren't adding addslashes() to their database queries already.
Discuss!