PHP程序常见漏洞攻击宝典 ！不敢相信！请大家辨别其真假性！

wolfg

[quote]原帖由 "jndxbbs"]全局变量[/quote 发表：

Perhaps the most controversial change in PHP is when the default value for the PHP directive register_globals went from ON to OFF in PHP 4.2.0.

You should do your best to write your scripts so that they do not require register_globals to be on;  Using form variables as globals can easily lead to possible security problems, if the code is not very well thought of.

夜猫子

还是有些人因为习惯了register_globals=On的写法，到现在还死抱着不放，我就看到有这种人喔。

swingcoder

if (!defined('_IN_APP')) exit;

what's about _IN_APP?

环境变量?

夜猫子

不如老大们写点php安全编程的东西，就是一些技巧和案例，整理出来还是不错的。

laokan

原帖由 "swingcoder" 发表：
if (!defined('_IN_APP')) exit;

what's about _IN_APP?

环境变量?

你弄个phpbb来看看,就明白了

类似这样的
if(!defined('IN_PHPBB')) die();