Tag Archives: Apache

register_globals

It can be considered as a flag that controls how you access form, server, and environment variables. By default this variable is set to Off, requiring you to use special arrays to access these variables. Its values are set in php.ini file .When the value is set to “on” , PHP will dynamically create global variable for many server variable as well as the query string parameters .

Its always better to set the value as “off”

Magic quotes

Magic quotes is a controversial feature of the PHP scripting language, which was introduced to help newcomers write functioning SQL commands without requiring manual escaping. It was later described and widely misinterpreted as help to prevent inexperienced developers from writing code which is vulnerable to SQL injection attacks. This feature is officially deprecated as of PHP 5.3.0, and removed in PHP 5.4 due to security concerns