Emulate register_globals Flag As On

Emulate register_globals Flag As On
How to emulate the insecure, deprecated register_globals flag so that you can access GET and POST keys as PHP variables.
// Use with caution, this is not as insecure as having register_globals on, but still poses injection risks
extract($_POST, EXTR_PREFIX_ALL, 'P'); // You can now use $P_ValueName instead of $_POST['ValueName']
extract($_GET, EXTR_PREFIX_ALL, 'G'); // You can now use $G_ValueName instead of $_GET['ValueName']

Leave a Reply

Your email address will not be published. Required fields are marked *

Back To Top