Our Ambitious Plan to Make Insecure PHP Software a Thing of the Past

Re:Our Ambitious Plan to Make Insecure PHP Software a Thing ... by fizdoonk on Wednesday January 17, 2018 @12:08AM (#16165632)

register_global

[ Parent | on HN ]

Re:Our Ambitious Plan to Make Insecure PHP Software a Thing ... by astrodust on Wednesday January 17, 2018 @12:54PM (#16170082)

If you're using that you're going to hard-fail even the most cursory of security audits.

[ Parent | on HN ]

Re:Our Ambitious Plan to Make Insecure PHP Software a Thing ... by CiPHPerCoder on Wednesday January 17, 2018 @01:21AM (#16165879)

extract($_REQUEST);

Look, one-line register_globals polyfill.

[ Parent | on HN ]

Re:Our Ambitious Plan to Make Insecure PHP Software a Thing ... by jccc on Wednesday January 17, 2018 @08:45AM (#16167797)

This kind of breezy dismissal is really frustrating. Developers and admins in the field are dealing with this situation for the reasons I gave above, and not out of simple ignorance.

[ Parent | on HN ]