3 ms·
First off, under disabled functions, 'eval' needs to be number one. Secondly, I was kind of disappointed that this wasn't an overview on common mistakes users
by eekfuh 15y ago
First off, under disabled functions, 'eval' needs to be number one.
Secondly, I was kind of disappointed that this wasn't an overview on common mistakes users do when learning PHP.
This feels basically feels like teaching someone how to enable safe mode, because you aren't teaching someone why they should escape sql or why they should encode user submitted content, which to me is much more important. (Though teaching someone to install Suhosin and disabling debug output is still important in my opinion, so props for that)
- jamescun 15y agoIt is a valid point, perhaps I should do a followup, showing how these settings affect PHP and examples of how someone could exploit them.