i've found one intresting article regarding new feature on php 4.2.

here's some intro about it.

For the longest time, one of the biggest selling points of PHP as a server-side scripting language was that values submitted from a form were automatically created as global variables for you. As of PHP 4.1, the makers of PHP recommended an alternate means of accessing submitted data. In PHP 4.2, they switched off the old way of doing things! As I'll explain in this article, these changes have been made in the name of security. Together, we'll explore the new features of PHP for handling form submissions and other data, and how they can be used to write more secure scripts.

more info

__________________
trashlyme®
tedbundyjr.com

i'm just testing it yesterday ... yes based on that article :P

basically there is nothing to worry about ... just add some simple variable to your old script, it will compatible with php 4.2.0 (afaik).

something that interest me is, we actually can choose how to read the variable that send from browser ... either $_request, $_get, or $_post ... in this way if we use $_post['somevalue']; people cannot submit the data via inline url (am i right ?) eg domain.com?xx=xx ... php dont read that because we choose to read from form that use post method. that way we can force user to use form (haha .. i like this!)

ps : it isn't actually made for us to choose ... it's for security reason i just use the word "choose" because i feel it like that.

__________________
I can't affod to have a signature here, can somebody sponsor me a signature ?

aku rasa sama jer, dalam konsep secure programming, aku nengok dalam kevin yank punya tips, kurang lagi.

Cuba nengok, kalau kita guna data dari get method pun

contoh url tu

bla.com/index.php?bla=ayam

dalam file index.php

<?php

$bla = "kucing";

$sql = "insert into bla values (data) values ('$bla')";

?>

tetap masukkan data $bla = "kucing";


aku pun kurang pasti, time bila dia unsecure, ada sapa2 boleh tunjukkan aku tak?

ohhh.. ada satu artikel lagi best mengenai security dalam programming

http://softwaredev.earthweb.com/scri...918141,00.html

__________________
Zenpipe Web Hosting - Peace Of Mind

aku pun tatau ... tapi maybe dia jadik unsecure bila user yg write script tuh terus jerk coding tanpa pikirkan soal security dia .. mcm phpbb yg boleh masuk admin page ... phpnuke yg bleh change admin password .. etc etc.

mcm contoh yg kevin yank tunjuk tuh ... for the first time aku coding .. aku tak pakai cara tuh .. so kevin tuh just gunakan coding tuh sebagai contoh utk menunjukkan betapa unsecurenya nya jerlah ...

itulah pendapat aku.

__________________
I can't affod to have a signature here, can somebody sponsor me a signature ?