Register Globals And Security Issues
If we enable the register_globals in our php.ini,all the $_GET, $_POST and and other predefined variables are automatically available to our script.
For example www.test.php?get=1
if register global is on we can directly get the value of get using $get instead of using $_GET[’get’] or extracting the predefined variables.
But if we enable the register globals , lot of security vulnerabilities are there.
for example:
if($user_id == 1){
/* */
///////////
}
if user has typed www.test.php?user_id=1, now the if condition is satisfied.
so it is nice idea to intialize all the valiable before use.
