Posted By

llbbl on 05/27/07

Tagged

2 people have marked this snippet as a favorite

/ Published in: HTML

foreach($_GET AS $key => $value) {
    ${$key} = $value;
}

Posted By: adkatrit on February 18, 2011: keep in mind here that you are letting ANY variable that comes in as GET data to be set to whatever variable name that is defined by the USER. thereby overwriting anything with that name in the scope of this code. This code effectively implements register_globals... something that was deprecated for security concerns. This may be an extremely efficient, time saving technique, but it makes it very easy to defeat your system.... i would suggest removing this from any code you have in the wild.

Comment:

You need to login to post a comment.