|
It greatly enhances the security of your system. For example, if you have a variable called $authorised, someone could override it by placing ?authorised=1 into the address bar, therefore creating both $_GET['authorised'] and $authorised, and setting them both to 1. If you turn register_globals off, only the first is created. You can do this by opening php.ini, finding it and setting it to Off, and restarting your webserver.
|