3 ms·
register_globals could not have existed without the legality of undeclared variables, and it could not have been a security issue without code that relied on us
by eevee 13y ago
register_globals could not have existed without the legality of undeclared variables, and it could not have been a security issue without code that relied on using undefinedness as a default value.
- stephenr 13y agoundeclared variabels aren't legal, they cause errors. if your php is configured to ignore those errors thats on you. of course it could be a security issue without undefined variables coercing to an empty string in string context - it could allow request parameters to override defined variables.